Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File:                     4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier:          Ysb0sGEjuqyCkzU9rJH0w3INeGu9EKjjjFjrb8QknKk=
Subject key identifier:   ED:C9:CF:48:21:6D:DF:ED:2A:C7:92:D6:D7:9E:DD:3F:C3:D2:E9:63
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer:       /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial:       01962ECFCC74DF6CC50052D71390D64DEDB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number:          136A
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: oXE7DCOFi0b1QrE/7wkwIInNP3/haX5h6zQiOWQcHas=)
                          2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:74:df:6c:c5:00:52:d7:13:90:d6:4d:ed:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=edc9cf48216ddfed2ac792d6d79edd3fc3d2e963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:d8:d4:fa:6d:e8:b0:a1:46:1a:ea:f5:38:
                    58:b3:7d:ca:73:62:1f:90:33:a2:78:a7:f1:d2:7a:
                    8b:ff:09:19:fd:c3:d9:9a:a0:c0:2d:d0:7b:9b:c9:
                    1a:a7:3c:d9:3e:ef:ab:a2:55:59:1d:a2:c1:f7:9c:
                    be:eb:cf:a0:cf:90:a8:7d:53:31:8d:d9:7e:9b:c7:
                    c8:d9:78:29:d4:b1:a7:1c:43:d2:2a:ff:f2:7a:03:
                    32:c4:2b:8d:82:69:b9:62:12:0c:81:ee:44:1b:59:
                    f8:49:d2:6f:7b:74:0c:5f:74:a3:39:f4:a9:6a:cc:
                    b9:f9:c0:6f:68:31:2f:e4:89:0e:95:62:7d:18:fb:
                    b9:be:18:fc:b8:d7:9c:7b:bb:1a:c6:0d:05:92:7f:
                    b8:33:be:59:2a:93:23:1c:4a:03:a6:40:26:cd:77:
                    74:aa:4e:34:61:b0:29:00:c4:87:10:11:4e:51:d0:
                    3f:39:6f:d6:98:27:19:19:bf:41:73:ce:09:e8:bd:
                    c1:7c:4c:a7:30:54:0b:05:a1:4d:a1:ab:ff:82:22:
                    10:a1:ea:0b:a0:99:49:69:65:38:4d:80:d4:e3:8f:
                    91:e8:13:ab:4d:42:4f:6d:d8:49:8e:a8:8d:f4:2e:
                    99:b1:e7:86:2d:f7:f0:50:49:7d:19:ca:c9:dd:0a:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:CF:48:21:6D:DF:ED:2A:C7:92:D6:D7:9E:DD:3F:C3:D2:E9:63
            X509v3 Authority Key Identifier:
                keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:33:df:8d:d9:a5:da:fd:3c:2f:3a:1b:28:08:77:5f:e0:
         af:2e:50:61:2e:fa:53:3a:a6:6f:8f:69:29:3a:2b:23:98:1c:
         b8:13:9e:d9:db:82:15:7e:17:ab:17:fd:99:53:b9:d9:9b:28:
         cc:fa:18:a6:43:88:44:4d:b9:2b:ce:96:4a:85:dd:35:cf:61:
         c1:83:91:81:f3:5b:a0:d5:a4:6b:57:aa:8c:1b:af:18:59:e7:
         34:ac:11:21:b1:cf:34:17:58:d4:ea:c0:cc:12:9c:c9:15:b4:
         8c:0c:de:a0:5f:a0:a1:f8:0c:6a:43:41:1f:67:3c:82:2c:16:
         93:97:d2:2a:17:dd:a2:40:38:15:b0:da:16:86:3f:46:9c:b3:
         44:76:95:b8:a1:11:bb:08:ca:48:3d:4f:44:fb:fc:7c:53:92:
         1b:c3:35:65:8c:a1:50:7f:02:31:16:05:34:60:7d:29:b6:06:
         9d:b1:f9:89:f0:3f:79:8b:8e:85:1c:39:80:9f:da:dd:be:e9:
         c2:15:06:e6:0c:f0:63:31:65:0b:26:d2:a1:69:47:21:c2:9b:
         a7:a3:72:2d:82:31:6b:8a:c6:d4:da:f0:bc:9f:d3:83:88:cf:
         d5:a8:b0:dc:34:7f:ef:1d:12:e1:87:54:ea:13:67:8b:f4:2d:
         19:e1:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----