Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File:                     CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier:          uERCzZ+2yTUkQ7QIExLqnXJfuplTUYnrwB295NZsb/Q=
Subject key identifier:   4D:6C:C7:EA:7E:7C:26:26:E9:9A:FF:47:75:7A:3D:D3:04:85:28:C0
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer:       /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial:       01962E618540DE756C151C66D0EAC78ADEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number:          100A
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: 6jX+QQoWwj8UOk2/ujUz0k0QNTQlq0FriZFC52ngUic=)
                          2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:40:de:75:6c:15:1c:66:d0:ea:c7:8a:de:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=4d6cc7ea7e7c2626e99aff47757a3dd3048528c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:9d:03:98:57:33:41:d8:ca:0f:d0:3d:29:
                    5d:7b:b9:21:9b:3b:86:4a:25:7b:bb:85:7e:14:c3:
                    88:15:e6:58:5b:09:3d:79:7e:c2:e7:10:8e:24:4a:
                    ac:01:08:da:24:19:38:85:d4:b2:33:2b:37:c6:fc:
                    a5:cc:08:ee:92:bd:6d:8d:32:18:3d:ad:9b:fb:1f:
                    72:c1:c4:57:9a:8d:01:38:8a:21:02:ac:b3:56:ca:
                    85:36:86:80:ed:55:1c:bc:47:08:bd:9c:7a:e6:3c:
                    1f:05:a9:c8:e5:43:c0:26:ff:86:ac:f7:0f:b8:ee:
                    97:90:16:4b:ef:81:dd:df:49:39:ad:85:98:4c:7a:
                    37:ac:2b:db:b6:9f:8a:4f:b6:0b:74:2f:c7:c4:95:
                    86:cc:38:0d:ad:29:e8:d1:2b:f9:24:1e:f3:f2:0d:
                    13:03:64:1a:d5:89:aa:6b:4b:29:db:30:df:84:0d:
                    ce:5f:9d:9d:c7:2b:ee:72:e1:6e:d3:d4:87:73:2b:
                    5f:43:07:86:d3:4c:d1:c0:c6:4c:e6:f8:db:62:0f:
                    85:a6:d5:39:66:d4:d9:f6:18:e0:d6:44:66:e1:59:
                    80:82:3c:aa:ea:67:cb:e3:96:5a:0a:f9:e2:de:24:
                    f2:aa:12:7f:eb:98:eb:a5:3c:07:c8:46:17:62:3a:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:C7:EA:7E:7C:26:26:E9:9A:FF:47:75:7A:3D:D3:04:85:28:C0
            X509v3 Authority Key Identifier:
                keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ee:5e:72:42:b2:f2:31:16:8b:22:c5:7d:db:e6:ca:48:fb:
         14:be:93:03:e0:e7:79:fe:14:7d:14:9c:b9:7f:ff:c1:08:51:
         0a:c6:d1:9e:ca:83:00:0f:b8:2a:4a:9c:9b:33:8c:87:6d:f1:
         59:08:c7:ed:0d:d9:8d:d6:46:7a:55:82:88:fe:73:4e:a3:69:
         c7:dd:d8:df:16:90:df:e1:9e:32:d5:33:e4:d9:e4:e3:47:b0:
         28:16:2b:e3:e8:34:46:74:5c:ed:14:3e:dd:7e:a0:5d:9d:f9:
         a7:2e:52:23:28:77:92:68:8d:4c:a3:41:13:1b:b9:44:0b:d3:
         bc:0f:2d:43:50:8c:e0:c5:1e:5d:d4:83:ab:b6:63:20:1c:01:
         8d:dd:66:ce:f1:96:7c:f9:a0:bb:cf:24:40:6b:d3:e6:85:b4:
         e2:b0:c0:2c:50:15:f2:57:d0:64:b9:62:37:e0:c7:f5:3b:d9:
         0a:64:5f:0a:83:9d:6a:f9:00:50:4b:a6:df:04:86:96:4c:d6:
         7e:d3:a8:c9:99:b3:29:d8:43:aa:d2:1d:81:7e:a0:70:66:a1:
         0f:9e:19:42:c8:3e:39:29:77:5e:15:1e:6d:dd:07:e3:28:85:
         c1:59:f7:c9:6f:51:40:8f:b4:67:fd:4c:e2:7d:75:f2:55:92:
         f1:c0:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----