Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File:                     xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier:          jeQ6Il3MBOtr+WNcgCbUzO+hbG1UNFt+EQkibVpELUE=
Subject key identifier:   3A:A4:1B:30:1E:E6:25:F0:79:9D:D9:24:C6:84:4F:25:2D:7A:1C:94
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer:       /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial:       01962E61F927E7A8799E6D04D7E013B47AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: J1bv0mB3tQbOH+vadTWnt/i6K352BQOIHUyEtNBR/ow=)
                          2: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:27:e7:a8:79:9e:6d:04:d7:e0:13:b4:7a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=3aa41b301ee625f0799dd924c6844f252d7a1c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:79:5f:9c:b8:da:84:a9:bb:64:8c:28:7a:
                    f2:f7:82:85:da:56:ff:e4:f8:2b:55:e0:ec:2e:07:
                    e3:03:24:96:2e:18:66:20:3c:c5:88:39:a0:3a:95:
                    df:fa:fd:c7:ad:57:de:3d:1a:89:4a:c9:25:77:e2:
                    19:c8:e4:c1:8a:7e:72:e7:ce:52:62:ab:d2:ba:8b:
                    33:b4:d8:83:74:d1:b0:1d:8c:1e:44:be:d6:5e:c0:
                    73:98:36:33:36:06:9a:1e:84:ac:09:8f:43:b3:57:
                    5d:49:06:c0:23:e9:08:5c:88:8c:ef:e3:63:1b:83:
                    27:66:48:3a:d7:10:a2:8b:a4:00:bc:8f:03:e6:f7:
                    69:7b:d3:d8:67:bf:a4:a0:bf:5e:8f:35:93:13:5b:
                    a9:99:3f:03:15:f7:92:d3:80:25:70:57:92:0a:a3:
                    c1:c0:dc:ab:a4:c0:07:22:33:ef:63:b7:c6:6d:ba:
                    4b:a1:0c:23:3c:39:b3:b8:0e:dc:40:84:a6:55:a8:
                    5c:81:2a:3a:f8:5a:b5:bc:2a:ea:4d:a8:5d:ed:05:
                    f8:0d:75:f8:2c:3b:f0:7c:48:25:bf:19:2c:af:da:
                    a2:f9:24:71:16:b0:f4:a3:dc:05:f7:21:57:c4:ee:
                    b4:1c:0f:01:fc:67:06:49:dc:75:30:aa:aa:72:2b:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A4:1B:30:1E:E6:25:F0:79:9D:D9:24:C6:84:4F:25:2D:7A:1C:94
            X509v3 Authority Key Identifier:
                keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:23:c3:bc:5a:7e:4f:86:9c:06:b2:97:0d:71:a6:28:2c:c8:
         43:0d:49:5f:ac:5d:7c:4e:be:d2:21:62:71:9a:d3:ac:f7:5c:
         cd:0f:70:4b:f5:ce:73:dd:00:27:d1:4d:54:79:de:00:b1:1d:
         a4:f9:37:84:fd:d2:2b:40:12:59:53:2d:9c:20:f2:4a:96:0e:
         f6:be:da:a9:a2:c9:7c:16:b7:10:4f:34:a8:e5:ea:7f:d7:55:
         3c:23:4a:3d:2e:13:e7:23:e6:f9:14:2b:3c:86:88:49:bd:85:
         aa:5a:29:18:15:61:60:ab:d6:a9:52:8e:77:6c:0a:54:68:e5:
         bb:37:ad:40:3c:01:c1:d0:8d:30:d9:94:fd:9a:fe:67:41:69:
         d5:0e:a1:8f:1a:31:f3:65:04:47:6e:6e:f8:91:34:cb:56:4b:
         0b:96:1d:7e:dd:a8:b8:63:9c:58:96:c5:4f:80:af:0a:3a:a4:
         e2:65:69:fb:ee:53:22:9f:63:f1:a2:e9:1e:db:c2:c6:30:c7:
         ab:a9:68:c4:db:c1:12:b0:4e:e0:eb:b3:57:3e:ae:cc:d0:55:
         69:b1:0d:b4:8c:6e:8c:1c:75:71:db:eb:60:aa:c9:c4:e3:d9:
         1d:ab:b8:2d:5e:ff:27:5c:a2:e5:ee:97:c8:de:33:ad:e6:56:
         b5:9a:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----