Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File:                     ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier:          kxFzuMEBh4O70iFUY/ISdkRtkQ0o+Iwi6uBmWr7zYFY=
Subject key identifier:   74:4A:B1:A5:C7:F6:2F:C2:F9:71:56:37:E0:F5:86:D9:41:2B:97:CD
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer:       /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial:       01962FAB2B96BEBCF34E2097D0CDC45AEC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number:          0486
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
                          2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: 0hw5ZuZFYinkKmFac5qpV/6yEIj+jGyuZi+xLfhG1xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:96:be:bc:f3:4e:20:97:d0:cd:c4:5a:ec:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=744ab1a5c7f62fc2f9715637e0f586d9412b97cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:83:ac:2a:12:ac:5a:93:dc:9c:4f:a4:e9:
                    dc:94:10:b9:8f:19:3b:c5:dc:01:46:3f:a6:b2:af:
                    38:8f:a9:15:a9:46:ee:ba:1e:5a:e3:b1:a4:06:e8:
                    06:f4:e6:d8:31:e8:b4:9a:89:9d:56:b1:f4:c1:70:
                    99:37:e7:e0:2a:27:d6:66:7a:85:2a:70:7f:ce:9e:
                    06:e1:bc:59:27:41:d1:40:d6:44:f3:48:ba:3a:3e:
                    f6:6c:81:10:06:2e:72:77:fd:ad:de:ed:a3:d1:31:
                    f2:35:6e:08:0c:3b:6a:52:b5:c6:bd:69:61:19:69:
                    0b:85:40:a9:88:5b:61:67:27:19:71:cf:c3:38:e3:
                    e4:94:83:e8:76:f2:4b:bd:23:eb:85:03:da:43:ce:
                    3d:94:e5:85:a4:0d:64:18:dc:2e:0b:b0:1f:1d:13:
                    61:4f:6a:7d:d5:91:c0:4f:e2:15:28:86:6f:6a:22:
                    2f:93:3d:40:34:b3:f7:dc:9c:9a:9c:2c:ae:ca:62:
                    27:6b:10:c5:2d:4e:68:1d:12:ec:6f:9b:2f:c2:3b:
                    81:75:e2:f0:6a:80:9d:81:72:77:03:f6:e3:17:c1:
                    88:e6:92:4c:76:5e:ec:35:27:3f:f1:9f:18:1c:4b:
                    f8:22:fd:71:ab:c9:fa:58:23:8e:27:25:44:ec:b3:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:B1:A5:C7:F6:2F:C2:F9:71:56:37:E0:F5:86:D9:41:2B:97:CD
            X509v3 Authority Key Identifier:
                keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:f7:2e:74:69:44:4b:0f:a1:26:6d:72:0a:90:19:bc:56:c5:
         ea:aa:1b:c7:04:76:4d:00:79:fa:f8:2c:09:39:58:8a:ec:78:
         7d:86:82:c0:6e:b7:8d:a6:40:b2:05:07:f8:ea:55:cb:7a:ab:
         18:67:64:59:50:2d:c6:57:40:d6:c0:bb:f2:96:9b:30:aa:00:
         db:ce:6c:56:76:76:e5:10:2f:f0:9f:3c:e0:5c:ef:41:09:49:
         d8:a5:62:bb:ee:cd:0c:38:f8:1a:62:8e:50:1d:1d:06:01:bd:
         66:b6:4e:1f:89:6b:02:a1:8d:ac:18:1b:18:86:1b:52:a5:b4:
         6f:a1:f4:ff:c4:da:4c:21:7c:b4:7f:dc:99:cf:24:c4:df:4b:
         40:f4:a8:18:0c:f8:12:3a:ea:26:ba:bc:85:1a:47:83:a4:fb:
         7b:60:b1:d1:9b:24:a2:dc:f6:ea:57:2a:7a:a1:98:3c:ee:4c:
         b4:46:d7:75:e3:9e:7e:40:1a:25:3b:de:86:42:66:4c:c0:93:
         83:48:58:6a:fe:1b:4b:fe:74:e4:34:7f:60:de:e7:79:8a:cc:
         73:c0:b1:88:a8:b3:13:62:f7:6b:dd:3b:ce:c6:2e:04:00:30:
         e7:9e:17:86:44:fb:34:b3:31:4d:17:41:29:0c:0c:dd:c1:9c:
         82:74:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----