Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          TnvWT1oyCpRfWFn43qiOn/eaJPYk1BzncyFujTTh5dc=
Subject key identifier:   8E:B7:00:E7:E1:AD:60:6B:F4:58:88:56:EC:CE:1B:3E:61:6B:3C:A9
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       01962ECF69304C0472D42AE1B40F04485F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          0429
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: T4Kdg3+2rtwoVfw8t55T3xy1t0POLOt8hm3HZPvUhp0=)
                          2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
                          3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
                          4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:69:30:4c:04:72:d4:2a:e1:b4:0f:04:48:5f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=8eb700e7e1ad606bf4588856ecce1b3e616b3ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c8:dd:74:ba:7f:e9:87:05:9d:be:b7:20:d7:
                    8d:00:a9:dc:91:7d:72:ac:41:81:c5:bc:f6:6d:2e:
                    7a:95:cf:90:ac:7e:3f:a1:89:48:e5:c1:3f:12:e3:
                    8b:35:d2:ca:26:f8:3d:62:b6:d7:31:2d:3a:53:2d:
                    36:73:cc:69:76:00:55:ac:6a:6d:92:12:ca:c8:48:
                    76:c5:09:fb:8d:88:1d:b8:16:7e:79:73:89:25:27:
                    3c:c8:ae:f6:a6:2a:fa:8a:ac:2e:ba:4d:c8:96:d1:
                    e2:73:96:05:18:d0:67:17:84:b2:8f:c2:0c:f9:20:
                    95:7f:d6:77:b6:be:7f:dd:3d:9e:f0:66:8c:85:e0:
                    ad:72:77:50:f4:f8:9f:1d:7d:53:95:3e:3b:28:c5:
                    1a:4f:56:27:f3:55:ed:02:37:20:4d:a5:70:4a:3b:
                    7c:0d:5a:11:1c:99:1d:fa:ec:fe:c7:d1:07:69:67:
                    00:3a:30:a1:9d:22:f0:98:7b:e2:20:31:44:a9:07:
                    c0:5e:26:ac:02:ef:34:9f:ae:02:12:46:1d:57:2f:
                    3c:b7:3c:1b:bc:c9:5e:66:56:ee:ef:ae:dd:fe:7f:
                    0c:72:95:46:cb:48:5c:02:55:f7:d8:f4:1c:8b:0b:
                    6c:c5:88:c3:74:17:02:4c:b0:17:5f:75:59:a3:92:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:00:E7:E1:AD:60:6B:F4:58:88:56:EC:CE:1B:3E:61:6B:3C:A9
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:94:87:f0:a2:57:c2:b0:c5:2f:8d:96:93:a2:0a:0b:fd:
         4f:e3:be:f7:a8:a8:43:06:9f:df:f3:36:06:88:93:e3:23:ff:
         67:3d:0c:5e:41:64:e3:fc:10:72:66:fb:ec:d2:e9:3a:85:23:
         35:87:ed:cf:d1:70:37:9a:df:49:b7:4e:ef:72:e2:2b:56:55:
         d6:fb:19:50:9f:89:a0:00:d6:bc:24:38:f4:90:af:af:34:61:
         45:80:f9:8a:96:49:cc:7e:66:9c:ac:12:85:c4:45:5c:31:c3:
         d3:62:fe:a9:5c:b8:12:5e:66:6e:e7:d6:64:55:f8:8d:af:59:
         e8:37:6f:55:77:e8:64:7c:b8:04:d3:9d:8a:cd:33:62:32:cf:
         d5:50:0e:74:2c:95:55:34:cf:aa:7e:c1:a1:4c:6c:ad:a8:85:
         ab:22:8a:84:be:4b:40:4c:46:65:4e:95:d5:3b:51:60:52:14:
         b6:7c:82:8f:52:21:7d:81:88:3a:14:dd:16:76:38:5c:4b:5b:
         0f:a7:dc:fe:0a:06:af:95:dd:90:0a:a3:c8:cd:cb:c0:e5:b0:
         9e:91:3b:6d:68:9d:a2:9b:f9:7f:ef:a2:a0:2a:04:f8:ea:4e:
         bc:8b:96:52:89:be:2a:99:63:8b:3f:89:ae:89:56:06:da:9e:
         37:2f:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----