Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File:                     4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier:          L4//d7uizblqzDR6idKZV2qWIqyQIC2EuyuQwPCicFg=
Subject key identifier:   4F:39:E6:84:02:7C:85:C1:73:19:B3:FA:46:2B:9E:BA:65:CF:3A:7A
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer:       /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial:       01962ECFDDCA89F0A42702574606F70053F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number:          10C8
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: Q50gHzjOEtHBSZKLVJ5ilmA1fdWYG5J7ld+71YsiFIU=)
                          2: nD4yzDe8gN70BN6Uz9ud-RgMLcw.roa (hash: 7QOqgSW5O1ke2t+FI1SJBMG+D851WexAWFy5Iq9dI8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dd:ca:89:f0:a4:27:02:57:46:06:f7:00:53:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=4f39e684027c85c17319b3fa462b9eba65cf3a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:2b:32:92:35:50:6b:c3:f5:82:9a:4b:8e:
                    e1:04:6d:21:35:64:68:c7:6c:f5:b2:8a:bd:2f:27:
                    91:ea:7e:36:7e:ee:25:6c:39:89:fd:77:64:0b:98:
                    ad:9a:a0:c1:3a:57:e4:a0:b2:42:73:9d:5c:63:8a:
                    74:14:fe:4a:f8:ec:d4:b5:c1:bd:8a:fd:d0:d9:c0:
                    52:73:72:a1:57:55:8e:09:5f:df:be:64:78:b0:38:
                    96:62:98:15:77:ca:68:ef:2e:e4:41:38:d8:23:4e:
                    70:77:70:92:53:77:80:b9:25:03:14:73:65:79:ca:
                    71:7a:97:c9:64:96:6f:82:ac:e8:43:9a:dc:42:15:
                    e3:04:a6:02:10:66:2e:dc:31:18:ca:7d:86:83:91:
                    25:9e:53:0d:3e:4c:82:a5:c8:51:8d:1f:82:62:a7:
                    a8:94:fb:4c:73:19:58:d5:3c:91:f7:80:54:08:ce:
                    3a:a0:72:5b:35:e3:a1:41:49:51:82:99:d6:6d:c6:
                    63:ef:b0:b1:20:cc:fe:42:7b:bc:ec:75:58:d5:85:
                    6b:5a:be:1d:17:d6:c3:63:04:25:8e:26:b7:a6:e5:
                    d1:48:0e:c6:28:b6:96:44:25:96:0f:69:f2:05:c3:
                    5b:fd:d3:bd:ce:4c:97:88:f9:c8:da:94:2d:28:c5:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:E6:84:02:7C:85:C1:73:19:B3:FA:46:2B:9E:BA:65:CF:3A:7A
            X509v3 Authority Key Identifier:
                keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:16:1f:44:0f:7c:b6:ab:b5:b1:4d:aa:7a:ed:b3:4d:82:
         1f:24:f9:9f:1a:06:16:12:46:b9:6d:2b:f3:ab:82:88:3b:72:
         63:52:cb:6b:ea:ff:54:7e:28:35:31:1a:6b:2a:14:95:d9:50:
         ea:34:9f:d7:30:2b:a6:f7:f2:70:35:8d:50:07:f5:98:3f:d8:
         d4:e8:6d:ad:1d:84:e6:a8:41:47:8e:36:fb:56:54:02:7e:8b:
         dc:af:53:bf:c6:3b:7a:4b:f1:3f:95:f4:a8:ed:be:cf:d1:ae:
         f0:9a:a8:fe:64:c1:aa:ed:8e:07:02:8d:d5:09:3d:f2:04:34:
         a5:d3:dc:08:50:5a:49:48:20:98:8c:85:03:65:f2:07:ef:fd:
         db:47:a7:07:1e:0f:ff:8c:73:42:f8:44:84:d3:60:31:bf:00:
         a1:0e:07:50:29:21:00:85:c0:00:80:26:ce:63:23:98:c9:a5:
         01:48:b8:09:f1:34:e6:81:de:95:42:2e:e0:75:fe:ed:a2:12:
         e8:77:6f:24:c8:46:e9:8f:7d:32:e2:0d:58:05:e8:45:52:1d:
         67:97:2d:1e:93:36:f0:6b:87:0e:28:19:17:a2:17:4c:e0:ed:
         4a:a8:9d:ac:ea:93:36:8f:fb:2c:90:1c:ee:85:74:15:98:45:
         8a:82:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----