Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File:                     RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier:          qtaHAn374ky+V+C3bLBFHMARpzmrmR3g4Xnwa8iULWI=
Subject key identifier:   EF:19:95:E2:FD:1F:B3:1A:DF:97:42:F1:F0:32:40:8E:9B:1A:17:E9
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer:       /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial:       01962FAB82BC31CF17DDC7EE65778AA54712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number:          026A
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 8grQ2vFM3eVMiTjAJ4jM3/0MAmdPWOjVmgEH/fgyltM=)
                          2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:82:bc:31:cf:17:dd:c7:ee:65:77:8a:a5:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=ef1995e2fd1fb31adf9742f1f032408e9b1a17e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:ad:0c:8d:79:67:99:97:35:e6:dd:c1:46:
                    ba:b9:90:6a:09:43:e9:46:dd:04:4a:8f:a0:0d:55:
                    5e:38:2d:ee:a0:75:b5:59:19:7f:41:bc:6a:43:12:
                    af:72:12:ee:b9:84:e2:a9:73:9a:a6:ec:9e:89:84:
                    01:70:aa:0a:31:d7:63:d5:03:6d:b4:ae:25:70:aa:
                    0e:e8:fd:fa:d9:52:b5:e4:79:5e:a7:ad:f6:41:78:
                    74:89:f1:7f:ef:8e:c2:44:b2:40:b5:cc:1c:87:2a:
                    0e:7f:5c:dd:a8:1d:3d:ac:af:e8:9e:58:5b:57:5c:
                    71:5d:f5:21:23:fc:36:82:60:df:e8:80:e3:f6:af:
                    12:4e:16:aa:47:6e:9a:20:51:0d:d0:10:4a:aa:6b:
                    51:80:63:1b:2c:8f:a1:48:3f:0f:74:13:ab:0e:11:
                    0e:76:d3:79:85:7d:96:4c:d6:de:89:e9:79:2c:e7:
                    f7:95:b3:87:08:15:c3:65:1a:5f:83:6d:95:e5:31:
                    34:5f:71:ff:7b:d6:f6:01:db:26:60:b9:a1:9f:92:
                    d0:e4:1d:ac:aa:b4:d8:ef:fa:67:59:d7:e1:a3:cb:
                    8b:cd:ac:6b:7a:06:35:dd:ff:82:c9:fd:c6:88:35:
                    70:ae:99:71:d7:53:0a:bf:0c:e4:96:ed:30:3f:f0:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:19:95:E2:FD:1F:B3:1A:DF:97:42:F1:F0:32:40:8E:9B:1A:17:E9
            X509v3 Authority Key Identifier:
                keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:13:30:af:55:8f:93:76:29:4e:21:3c:1c:66:94:99:f2:
         c0:a5:98:ab:a1:e0:91:4e:49:af:b1:89:01:b8:02:6e:c4:19:
         41:64:94:53:81:37:dc:57:4d:8b:58:bc:0f:ad:7b:c9:4b:65:
         5d:f7:f0:2a:74:8f:6d:3c:79:93:3e:1c:50:b2:8e:61:a3:dd:
         b5:a6:73:2d:d6:7f:3a:d8:b4:93:c4:7c:23:27:d8:be:d4:52:
         87:f6:8b:30:56:2c:5f:ad:90:f6:b0:4b:0e:1d:19:5a:02:58:
         d3:3b:dc:25:3a:5c:b8:4c:77:12:40:10:b6:4a:1e:77:30:68:
         8d:f4:8e:65:f4:db:aa:91:42:5c:02:83:8f:33:be:c1:52:ad:
         28:72:63:da:ec:10:4f:44:27:a4:cc:d3:89:7c:b9:42:e0:68:
         ef:8c:38:bf:df:1d:5b:51:42:49:7a:50:7f:4b:f2:d8:32:64:
         00:a6:cb:16:fc:25:f2:d0:4a:f2:42:d9:0b:cd:27:e4:10:3f:
         92:08:1c:3e:f3:a9:e5:48:69:dd:40:ae:4b:c8:0d:a3:6a:f3:
         cc:33:af:eb:65:63:97:0f:ca:2d:dd:00:df:1f:7a:50:25:35:
         e7:98:fc:4e:15:4c:13:78:ff:e6:93:2b:7c:d2:84:f6:1a:bc:
         c7:fb:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----