Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File:                     tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier:          Nxt6prY2f51kj8izJ9z+Jq4FngAqWMSbIRBKFUv93gY=
Subject key identifier:   85:7A:4B:0A:82:7E:8D:68:3B:7F:4C:92:DE:08:50:A5:E9:9D:11:DA
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer:       /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial:       01962FAB5180F95B6A1D361E75E1E7082846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: ZyOmCMqVZ/h84Xz5sSi3cpRmQ/e4S1eEPjZjQfo5cSY=)
                          2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:51:80:f9:5b:6a:1d:36:1e:75:e1:e7:08:28:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=857a4b0a827e8d683b7f4c92de0850a5e99d11da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:72:72:15:49:95:46:38:49:72:ac:79:95:
                    b4:e7:d0:a4:d0:6d:fd:dd:92:df:a9:8d:97:59:fe:
                    55:85:44:90:3a:95:f7:a6:ac:95:76:83:4c:03:fe:
                    e8:13:56:22:69:3a:f4:18:e5:3b:1c:56:61:5b:a0:
                    f5:38:b8:29:64:6a:ad:bc:0c:c1:f3:c1:9b:dc:e0:
                    7e:51:9c:4f:91:78:27:b2:63:88:1b:87:bd:a1:69:
                    f9:16:e4:c7:ff:c5:8f:b8:f8:72:ef:4c:1f:51:3b:
                    82:cb:8d:24:e0:07:b2:a8:5d:dc:b7:f6:9d:a0:f1:
                    65:a2:55:da:37:db:fb:99:78:9c:c6:19:67:dc:92:
                    c7:b0:91:24:a7:c5:b7:a0:e2:55:81:18:a3:3f:6a:
                    30:73:45:8e:ed:c9:8d:57:f0:9b:15:6c:1f:ec:27:
                    0d:cd:0d:b5:d5:da:b5:f8:ba:84:d4:b1:18:c8:a0:
                    02:37:e9:45:0a:a9:6f:b7:a1:ca:67:f2:a8:de:e5:
                    7f:33:31:63:72:67:11:88:04:06:63:20:be:6c:fe:
                    f2:3a:aa:5a:ad:2d:e2:5d:8a:56:d3:f6:0b:ff:19:
                    12:82:df:cc:ab:ff:cb:f9:be:77:71:52:b7:ae:34:
                    9d:b0:78:36:ce:48:b2:62:4b:0b:37:3e:73:73:9a:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7A:4B:0A:82:7E:8D:68:3B:7F:4C:92:DE:08:50:A5:E9:9D:11:DA
            X509v3 Authority Key Identifier:
                keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:52:13:e9:a9:5a:e6:b6:4a:fb:4a:ca:9f:b2:b8:af:2a:1d:
         23:7e:cc:83:6a:1c:12:ae:ab:07:1e:09:20:72:df:cc:d1:e4:
         f2:3e:dc:27:06:82:b9:a0:67:94:e6:6d:07:ed:77:59:04:1f:
         a9:25:83:67:d0:9d:ea:75:2c:92:ba:0e:71:7c:9c:e5:e6:7d:
         62:56:5f:68:be:73:96:37:45:9e:e4:cd:3a:13:57:2d:d1:90:
         a0:33:c3:95:17:f3:a7:6d:ba:94:9b:9a:76:29:c9:d6:af:2d:
         a3:52:2a:bf:ef:14:c9:ed:74:35:94:ee:07:0c:49:1b:05:0a:
         de:25:29:50:3c:45:ec:85:f3:39:70:0a:c1:66:80:2b:7e:ec:
         e2:61:88:b9:10:4b:46:5f:41:c8:70:80:45:e2:81:bd:bc:57:
         63:52:52:ac:47:01:62:40:29:77:9a:74:f6:ca:5f:2b:fe:aa:
         db:f3:33:9e:50:4b:47:09:ab:43:75:28:a7:fa:d5:00:7f:16:
         6a:a5:f4:9a:b8:05:85:ac:b7:24:b6:f6:82:8a:f7:51:5b:79:
         06:bd:a4:04:bd:64:5f:77:76:5a:f5:22:b6:c0:57:33:ee:72:
         12:49:ef:8b:ab:46:60:67:50:e7:cc:6e:48:06:4e:66:2c:62:
         7f:ca:47:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----