Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File:                     CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier:          cX1RKpctKUc4GgBBZ0I03vTaf9VOOF9PzWsO+1er9i0=
Subject key identifier:   59:A8:E2:9A:DC:79:7A:C8:1C:33:9A:7A:FC:29:30:9F:C3:A2:CE:B6
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer:       /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial:       01962F3D491D6E13A08A2E40E9118C06FE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number:          0EDE
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: FMzA/Zmk/DrpSsn/HYgzi9tJXuH2llqaB/HU7RrkjmY=)
                          2: ivGsGxEIaQg3eTWW5YQRIPtIuDY.roa (hash: l2FcCUkM86hTAWJrLWFUiZXNcITlcUDIimETJwhAOes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:1d:6e:13:a0:8a:2e:40:e9:11:8c:06:fe:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=59a8e29adc797ac81c339a7afc29309fc3a2ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:24:b2:34:3d:4b:08:c6:94:9e:38:53:2a:
                    6b:2c:97:17:b3:b1:c9:3d:5e:79:ff:8b:1e:b8:12:
                    16:eb:dc:12:3a:e5:af:1a:16:a0:a9:5b:16:ab:bb:
                    02:bb:80:1c:66:37:4d:10:3d:b0:23:1c:36:3f:7d:
                    f6:47:37:7c:8d:e9:ac:a1:9d:f8:97:d0:a6:0d:18:
                    59:24:b8:ab:e3:77:0a:27:4a:76:99:f7:f3:58:8a:
                    a5:3c:be:c4:6e:7f:70:2e:28:6f:cf:94:ef:99:b2:
                    e8:3d:72:2f:3b:da:f5:85:d3:2a:78:22:25:50:e8:
                    8b:b8:cb:dd:45:b5:e6:79:c6:66:28:7d:e3:66:a7:
                    63:d4:3c:a9:64:30:c3:52:68:5a:3f:d4:94:23:82:
                    28:ae:05:30:44:45:72:f1:9f:28:22:48:19:d9:95:
                    ba:61:01:a9:23:aa:35:ac:52:7b:21:e2:b2:3a:a3:
                    e4:6a:57:7f:fd:ca:82:a9:96:99:8c:83:19:ae:f4:
                    87:6f:7b:a0:e7:eb:70:48:a0:52:c2:4c:51:fe:14:
                    6b:4f:48:3a:b3:ac:fd:86:f3:a8:a1:96:d9:db:55:
                    99:f6:f4:23:d3:d4:37:a4:5e:32:76:94:f6:e3:36:
                    6f:de:07:96:90:e6:ea:43:34:64:41:68:e8:b8:41:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:E2:9A:DC:79:7A:C8:1C:33:9A:7A:FC:29:30:9F:C3:A2:CE:B6
            X509v3 Authority Key Identifier:
                keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:39:70:60:17:4f:bc:58:7d:8e:ab:7d:c5:71:9d:06:ea:97:
         3d:99:0e:7b:f1:71:c3:53:cf:c7:42:b9:b6:ef:b5:ff:fc:e1:
         62:dc:c5:f6:35:2a:28:16:5c:7e:fc:b4:65:5c:10:23:e2:ed:
         ce:a1:e0:8c:ba:83:95:df:94:e5:84:37:8d:97:c4:91:25:07:
         58:9a:1d:b3:f7:79:14:4a:51:63:4e:fa:2c:c5:0a:91:7b:b6:
         8a:14:54:de:6e:65:4d:fe:dc:32:3e:8d:66:20:8e:26:73:4e:
         78:89:54:1e:ed:66:0a:88:18:f1:ca:31:1e:e7:40:8c:5e:23:
         ab:17:21:99:e9:fb:e1:b4:e3:e5:7b:0e:a8:e2:f6:d6:b6:b0:
         a4:e2:bc:ce:b9:49:5d:90:03:b4:65:d0:6b:50:65:af:da:bd:
         11:96:22:1b:4b:b9:98:7b:8c:4a:cb:ff:e4:17:8f:b0:74:1e:
         ec:7d:7b:22:e0:bd:61:06:65:01:77:a9:df:a9:a9:48:37:26:
         ad:f8:d8:db:92:51:3f:ce:f2:35:4d:86:56:52:b6:85:df:9b:
         31:70:56:fb:80:20:2a:87:66:86:bc:c3:e1:c8:6c:8b:e8:a0:
         16:af:5b:3b:6e:92:cc:fb:89:87:7f:01:5f:07:d0:36:41:7b:
         dd:03:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----