Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File:                     RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier:          fSLrgmCrGZN8FI3HfoufzhgftzSBUMOZYMww1O2WqxI=
Subject key identifier:   20:32:19:DB:DC:25:79:C8:33:B8:7D:94:71:77:2D:F0:0C:35:3E:A4
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer:       /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial:       01962F0744F453BA10B058A0B168B7A35571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number:          08EF
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: +RlmrbmNqnivzgND2VGEeW3BqrDeLdpk61sTOpQSfTo=)
                          2: Z2Ec6FKFCMROAvsvU_-EjGHw4ww.roa (hash: 422PPfALRjVpASZNjTqWvSXQqN/bAdN9tO/keC7QHEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:f4:53:ba:10:b0:58:a0:b1:68:b7:a3:55:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=203219dbdc2579c833b87d9471772df00c353ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:5d:60:ba:a3:0f:a7:ea:47:89:19:53:58:
                    57:99:f1:91:d6:92:a8:4f:fb:72:6f:c2:2b:94:e1:
                    0e:75:ee:dd:28:3c:10:04:97:39:14:84:27:38:b9:
                    5f:64:6e:7f:54:6f:51:41:4a:57:27:eb:bf:fd:e6:
                    b0:e5:c6:36:24:18:ea:00:56:1c:3c:4c:8e:d7:18:
                    2d:ab:94:2b:c9:90:85:ac:18:49:2e:fd:79:fe:2f:
                    2d:e7:14:78:ea:a5:18:94:ab:ce:2d:36:3c:5d:ae:
                    bc:ba:bc:7e:e6:8c:d0:61:1c:0c:d1:f0:98:4c:ad:
                    fb:c3:73:50:6d:79:05:6a:65:e2:48:2f:0c:58:08:
                    3c:dd:48:eb:fb:d4:52:72:12:c3:bc:71:d6:f3:92:
                    e6:1b:af:03:93:a2:46:da:be:fa:15:0c:96:30:b4:
                    ed:0f:35:9c:93:b9:ad:f3:55:33:74:2f:8b:39:c9:
                    20:d6:9a:72:c6:4c:ed:a3:98:97:c0:19:bf:52:bb:
                    e4:c4:14:ab:72:26:74:c0:49:2a:0a:79:f5:8e:b6:
                    4d:60:79:70:5c:ee:a0:35:26:20:c6:61:d8:81:81:
                    ae:1d:fa:d2:4d:f3:4d:cf:96:c9:5a:d5:02:c8:77:
                    cb:c2:38:51:78:47:6d:d7:95:d5:22:63:34:99:96:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:32:19:DB:DC:25:79:C8:33:B8:7D:94:71:77:2D:F0:0C:35:3E:A4
            X509v3 Authority Key Identifier:
                keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:bd:18:32:29:95:d4:90:2d:95:8b:17:7f:b1:63:dd:92:
         61:65:8b:0f:1e:14:06:60:13:ce:4b:d5:61:84:8c:c6:e8:77:
         cf:d8:0c:ed:fc:52:8b:b9:ef:57:19:74:00:f3:94:a2:53:c0:
         91:e4:a7:36:76:de:11:b1:3e:26:b5:43:a2:99:2c:eb:2e:db:
         79:7d:21:80:80:00:bd:69:49:2c:8f:2b:e1:e5:81:ec:ee:f7:
         5d:c2:7f:23:6c:7a:f9:b0:3a:3f:c7:50:68:fb:cd:05:13:18:
         e7:ba:d2:af:4b:13:34:bf:76:30:c0:86:94:6a:2d:95:8d:0c:
         87:e7:f7:ec:9e:37:0d:a8:bd:a5:d6:92:0b:27:1e:d6:b7:e8:
         c2:2c:15:5e:a2:08:a4:02:4f:f8:d8:92:f8:80:ab:2e:20:be:
         1e:d0:ee:6a:3f:6a:d5:4e:89:ab:99:38:9b:25:f5:3c:d1:ec:
         15:a7:26:4f:5d:1f:bd:0f:be:92:8d:f9:4b:fa:74:e0:e3:ca:
         8d:17:7c:44:6e:be:ee:d4:30:97:01:6d:86:26:d7:67:11:1f:
         7e:bf:ae:05:91:82:55:54:e1:f5:e5:13:43:3a:4b:b0:f8:e5:
         25:d1:3f:1b:39:35:3e:6f:8c:98:02:3d:81:8d:e7:b8:1b:1b:
         8c:6d:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----