Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File:                     Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier:          4vWUUfts2FauCEaJhFwClcimEFi39GIFz3WmYpDpgOw=
Subject key identifier:   02:A4:72:B0:81:AB:F8:C6:39:74:11:5F:88:8F:A8:B6:76:36:43:7E
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       01962F744BF97DD4F9790527FD6B9178A831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number:          0599
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: kXowzIvR8K0SFsxfoXHorqTUl8nn4BIfZxNf9gO4jTk=)
                          2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4b:f9:7d:d4:f9:79:05:27:fd:6b:91:78:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=02a472b081abf8c63974115f888fa8b67636437e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:73:fb:57:ec:f3:5a:73:c2:74:92:a0:b0:
                    73:a2:f6:f1:e8:54:e5:79:26:51:85:f3:e6:78:be:
                    4b:c5:6c:97:4c:8d:30:4d:de:2c:d6:c7:9c:cc:68:
                    04:8e:fc:40:ba:e2:bd:7d:82:e2:85:e9:64:95:8a:
                    38:d7:e1:ca:fc:5e:60:3f:0e:04:d0:3b:57:1f:a5:
                    57:f1:bf:43:d0:f3:35:c7:ff:16:0c:52:e6:1f:83:
                    cf:5d:5b:0b:a6:70:6e:3b:11:36:53:61:cf:8c:4e:
                    9d:8c:de:7a:40:24:f0:20:9d:a0:b7:ea:be:87:ba:
                    61:54:89:6d:ea:5c:af:5d:98:36:4d:51:81:eb:06:
                    52:1e:01:4d:c4:49:69:5b:36:b3:1e:d1:db:f5:4f:
                    c0:c3:92:c0:11:1e:e6:a5:8a:9e:53:95:23:b6:49:
                    7e:0b:30:ac:d8:d8:c5:69:2c:16:14:ae:31:94:3c:
                    12:36:92:6b:6b:b3:c8:fe:48:f3:10:c6:12:a0:db:
                    df:eb:14:b2:1d:79:cb:b8:45:17:e2:7f:ad:c6:87:
                    bb:8c:b3:46:f5:7d:20:e8:c3:b6:f7:76:c1:85:1f:
                    ee:2f:7f:f6:6f:d0:de:25:e8:23:aa:1d:f1:50:37:
                    39:5e:65:22:52:de:9f:3c:7d:3a:ca:1f:91:4d:4f:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A4:72:B0:81:AB:F8:C6:39:74:11:5F:88:8F:A8:B6:76:36:43:7E
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:88:77:56:da:91:79:e8:4a:8e:dd:85:7b:a1:80:f5:ae:a4:
         60:0b:ba:f7:8d:9e:28:1a:6b:f9:6d:9f:6f:0f:fc:8a:75:f1:
         74:2f:e8:d5:fe:9e:8b:1f:a3:84:d7:38:03:8d:33:ae:1d:70:
         a3:85:88:8e:b8:62:6f:bd:7e:9f:9d:b8:e7:d0:95:ac:22:56:
         a5:bf:41:5b:c3:5d:73:9d:4d:f8:d0:fd:50:19:34:bf:6a:5c:
         8c:fa:35:b3:f7:1a:a0:8f:48:00:c1:69:8a:30:f4:24:9a:79:
         7d:6b:05:22:87:30:5f:12:8d:01:60:cc:45:85:ea:d6:de:a7:
         dc:3d:7a:77:4b:bc:43:c4:24:9b:19:82:6d:a6:22:e5:d4:67:
         bf:fb:2e:30:2a:26:52:4b:70:8b:60:1a:19:d8:dc:67:07:1e:
         c1:0e:b9:b8:b1:1e:f9:94:fd:0e:a4:77:e1:94:b8:96:dc:cf:
         8d:6b:ae:92:ed:09:ed:a6:71:e3:8a:96:b2:9b:41:05:b9:e1:
         78:83:b7:01:a2:40:e1:8e:a7:99:ba:a0:dc:da:18:b3:3d:65:
         50:a8:ca:8d:ec:5c:19:c7:09:26:d9:45:be:10:11:13:e2:d7:
         c4:a4:c6:a9:50:5e:3c:97:84:e5:60:41:d3:e7:ef:04:8e:a1:
         5c:30:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----