Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
File:                     S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json)
Hash identifier:          7wWecp+kSP2PccAqKgLgPUW1ecY/hHWhzmRJi326mnQ=
Subject key identifier:   57:D7:4B:A4:D2:89:AD:87:C9:8D:53:B7:F9:6D:E1:68:63:53:F1:76
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Certificate issuer:       /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial:       01962F0666880E751A840040BC008413942B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (hash: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=)
                          2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: G7wi/+cxv2qBTBaweb8NDLwbXTvAxN+CnH4v4x8/OuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:88:0e:75:1a:84:00:40:bc:00:84:13:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=57d74ba4d289ad87c98d53b7f96de1686353f176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:db:ec:75:e3:07:13:93:e7:a7:15:f0:ae:
                    53:33:91:3d:ff:90:de:94:5e:4b:72:1b:a5:66:d6:
                    05:c9:7a:e6:91:97:c0:d4:fe:33:e2:41:d9:d6:f7:
                    51:77:3f:53:78:89:b8:3b:1f:ec:f7:68:3f:f0:0c:
                    52:03:18:fa:a9:60:1a:61:a4:31:22:43:13:a0:92:
                    4c:26:01:04:d9:f5:1c:df:4e:c4:80:92:43:9c:b8:
                    9f:9d:e1:9a:69:60:34:64:13:ce:12:87:ab:c1:c8:
                    72:bf:8b:1c:12:a3:c8:2b:c0:23:59:10:28:4f:08:
                    36:33:82:21:6e:17:eb:9a:18:74:ef:27:4c:89:37:
                    04:49:3f:33:c1:17:ca:77:fc:04:1f:53:f6:b8:41:
                    aa:df:42:75:ac:fa:c7:6e:bb:18:64:96:be:43:e6:
                    5e:26:94:3d:85:88:0a:26:9e:bb:32:10:82:43:80:
                    e7:81:bd:a4:2f:90:e9:ec:e7:74:0c:b2:38:bd:e8:
                    62:f3:82:9e:e1:ea:4c:86:23:3a:3c:cd:b4:5e:c8:
                    00:6d:ad:e1:20:85:06:12:b0:9a:2b:a0:ed:63:02:
                    4a:a6:ba:5c:6e:d3:77:05:35:1a:1a:a6:b6:7a:28:
                    a2:39:05:80:b5:32:7d:f7:c2:9e:17:98:e1:19:d7:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:4B:A4:D2:89:AD:87:C9:8D:53:B7:F9:6D:E1:68:63:53:F1:76
            X509v3 Authority Key Identifier:
                keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:ee:c3:61:af:e4:09:25:9c:71:af:32:1d:25:7c:4f:f7:
         48:0a:51:67:e8:46:10:36:0c:e2:39:b2:57:8b:6a:64:d4:44:
         d6:a6:80:2c:10:45:83:a8:05:ce:3e:c9:56:7a:07:c2:76:0e:
         95:0a:31:d1:f1:3f:9c:06:a8:44:9d:de:89:39:58:72:14:76:
         d6:cc:ec:77:d3:db:97:5a:ea:ac:91:2e:29:4e:43:d0:19:2d:
         09:bf:b0:db:a9:3f:cd:bd:73:55:80:bd:63:f2:80:d5:f6:03:
         30:0f:a0:4a:6c:ad:4d:50:d3:02:48:51:ce:8d:4d:4e:76:d0:
         7c:c5:b8:63:24:ab:51:aa:8c:7f:8b:96:53:41:7d:ea:8a:69:
         88:74:0a:17:4d:42:4f:cd:fc:69:62:7c:79:02:d8:72:71:be:
         94:02:0f:64:9b:5c:2c:0f:5e:63:76:92:07:17:72:0a:2a:c2:
         56:b7:88:5a:04:ad:38:c6:10:4f:d9:09:72:96:b6:aa:9d:e5:
         37:c4:3b:c4:8b:3c:2f:63:5d:d0:e0:f2:31:6d:9b:4c:bf:a4:
         2a:6f:cc:35:8a:d6:0b:73:a9:24:02:1e:ec:9f:46:b7:c6:53:
         b3:ae:fc:98:23:c1:8d:0b:eb:7b:1c:d1:48:df:7d:01:f5:41:
         f5:48:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----