Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File:                     4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier:          br9KDyG8qN3TIzi7LAUlDzyii78M4FV8RmlkibHKYR0=
Subject key identifier:   5E:C5:8B:93:10:0D:4A:EA:49:F6:17:08:D2:9A:28:BB:6F:16:DE:25
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer:       /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial:       01962F3D3DAF73B7112BDBD07424C499EA32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number:          06FB
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: nTupIFaNoA6ojZChmYWk3rOIlacKxQSndLs6bP4Ibvc=)
                          2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3d:af:73:b7:11:2b:db:d0:74:24:c4:99:ea:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=5ec58b93100d4aea49f61708d29a28bb6f16de25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:b8:c8:de:c8:c1:51:49:46:0f:48:99:55:
                    dc:64:09:57:28:ba:e1:ee:02:23:13:80:2a:44:b3:
                    11:03:62:09:21:de:a1:a0:cc:57:f8:dc:aa:6c:e4:
                    cd:f1:ae:5b:9b:b6:df:66:bb:cd:74:f9:7e:20:a3:
                    a9:1f:10:f9:05:ac:53:67:6b:e5:f4:80:a9:a2:3c:
                    7f:fa:82:f0:9b:a7:25:58:77:ce:1c:5e:9e:92:5b:
                    f7:da:3f:77:c0:1e:8a:e9:02:d5:c8:7b:53:cf:1f:
                    2c:7a:f6:ab:81:d1:7d:e0:58:42:44:e7:d5:f1:19:
                    e0:b8:14:ed:55:6f:6b:79:75:62:fd:0c:8f:a6:fb:
                    ec:db:1d:40:79:76:ad:1c:93:a2:8f:33:23:76:6b:
                    06:80:ac:64:7d:20:5f:51:47:27:9e:55:89:40:05:
                    eb:89:31:ad:81:08:f2:75:15:10:a8:99:ce:16:b4:
                    dd:2f:0a:45:d4:db:42:b2:02:cb:0d:7f:e1:25:37:
                    81:5d:d6:44:1c:0b:10:92:42:9d:3b:41:68:4c:e0:
                    de:df:95:b8:9b:8b:62:fd:35:7c:13:29:7b:b2:4a:
                    19:6b:43:3c:d2:80:93:6c:69:e5:17:41:fc:73:39:
                    83:da:8c:ba:62:73:3b:7f:04:2b:d3:bb:dd:51:6d:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C5:8B:93:10:0D:4A:EA:49:F6:17:08:D2:9A:28:BB:6F:16:DE:25
            X509v3 Authority Key Identifier:
                keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:b5:5c:25:2e:a6:52:9c:04:c6:22:48:8a:9e:29:fa:b8:
         b2:f6:42:bb:68:f8:cc:f2:3c:43:c5:cf:0e:7c:38:da:b5:72:
         c7:56:5e:79:1e:52:2d:cd:f0:82:0b:75:a9:8b:bd:6f:df:74:
         e2:a4:9d:3a:55:79:fc:92:4b:0a:25:d6:b5:6b:d9:d7:ec:93:
         68:2c:ee:b4:e9:64:86:d5:20:6b:ed:1b:8e:a2:10:71:28:95:
         91:a8:22:76:76:bd:8f:a8:02:96:fe:a5:06:b1:78:42:67:d3:
         b3:ae:f4:a7:70:18:28:9f:4c:46:70:32:56:fd:4e:40:ca:84:
         d8:11:ec:2c:f7:6a:73:22:7b:85:b9:10:62:75:3d:73:78:1d:
         96:01:e6:bd:16:fd:25:24:48:17:2a:25:1a:8c:55:78:2e:7c:
         bc:98:e1:d5:11:34:78:38:dc:f0:8a:a5:14:c5:34:6d:b9:4c:
         e7:99:45:95:d5:33:7b:92:e2:f4:8e:a7:a8:41:32:08:5a:c9:
         44:ed:d6:63:85:03:96:6d:84:47:9e:4b:c6:21:33:b8:c6:70:
         a2:8e:62:58:1e:f5:a1:33:56:d7:c3:c5:6e:81:fa:07:50:c3:
         99:8e:77:c1:42:0a:13:3c:20:5b:59:9e:94:6a:f9:7f:9d:2e:
         44:55:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----