Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File:                     4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier:          KwNSjLIvEHui0wZzaLz6chTwnrYglcJAjr92UTHVliY=
Subject key identifier:   AD:20:14:24:B1:63:82:BF:CE:3C:A5:1E:F8:FB:AC:09:6C:49:F1:4D
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       01962F7444754561BEF42DDAE48925BF5FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: QgBL5S+ADbTLxyNIrOv+Md2bYlGfFVHf5apwHma3MIA=)
                          2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:75:45:61:be:f4:2d:da:e4:89:25:bf:5f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=ad201424b16382bfce3ca51ef8fbac096c49f14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:00:d6:3e:84:8d:5b:93:e6:57:12:54:34:
                    e1:3f:0e:6f:a6:fe:c5:06:5c:0f:ef:3c:3c:87:1c:
                    a8:24:e7:45:9e:2b:3a:75:ca:22:df:fb:c0:15:d3:
                    a9:78:0b:c0:af:d3:d0:04:6c:31:46:8c:08:03:e4:
                    53:4e:bf:77:de:c3:4b:19:64:f7:0d:2b:af:88:e6:
                    8f:5c:3f:5c:85:cc:91:b8:b6:0a:25:02:4a:f0:a6:
                    b1:a7:db:92:49:39:97:e7:20:7f:43:ce:f7:0d:6b:
                    11:a8:bb:78:70:71:47:3c:61:11:40:7d:51:14:84:
                    c7:6c:48:bc:d6:1a:04:11:f5:89:5c:0c:5d:48:7c:
                    b2:74:3e:30:d7:78:72:b8:ae:32:4e:15:66:cd:3d:
                    2b:f1:c0:95:70:9f:5c:35:9c:62:8c:02:f8:1b:ee:
                    85:30:12:cf:d0:88:61:2a:61:90:ea:19:5c:88:ff:
                    a6:5e:8a:65:c3:38:52:cb:1a:b9:ea:00:1a:12:b7:
                    1b:b4:c8:6a:07:00:88:3c:f2:8a:06:a5:66:83:73:
                    9f:c2:0d:ed:74:05:81:91:0f:b9:9f:09:70:92:c4:
                    d3:15:39:c4:e7:6b:89:01:c4:2a:3c:4b:ca:a1:e1:
                    66:86:a2:d9:0e:18:eb:a3:26:86:f5:b0:42:94:98:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:20:14:24:B1:63:82:BF:CE:3C:A5:1E:F8:FB:AC:09:6C:49:F1:4D
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7e:f6:75:74:bb:6b:a6:53:2a:23:c7:cb:d8:9b:7c:94:ff:
         d2:96:76:11:c5:ae:fd:b2:8b:9d:48:be:39:aa:da:f9:65:d4:
         25:e0:9f:04:e4:b2:18:a8:a9:6f:2c:aa:fb:8f:e3:8f:fc:54:
         2f:59:4b:26:7b:bf:7c:fa:80:26:76:23:be:b6:a6:28:31:48:
         5d:fd:46:74:3f:f5:62:f4:a4:44:62:c5:a1:a8:10:b9:3f:e2:
         08:9e:f7:48:37:ae:5d:05:aa:28:5c:e3:4a:15:df:bf:49:e4:
         1c:f0:9d:63:ce:5c:17:2b:c4:95:13:22:ba:5c:c2:13:a6:ed:
         b9:5e:6e:f9:31:0f:3c:ee:d6:07:83:bf:a1:56:5f:18:9a:aa:
         6b:5e:b9:0d:07:ed:6a:26:03:19:13:ee:6a:16:42:cd:7e:71:
         70:bc:68:44:d6:92:64:52:4c:77:de:08:bb:20:a9:53:bc:44:
         eb:7c:95:7c:88:a1:0f:eb:df:9b:a6:2b:c8:d6:81:60:c8:0b:
         4f:6b:8b:29:d6:3f:52:ce:62:f1:50:0e:62:ad:51:54:52:d0:
         11:16:84:01:04:24:ce:07:5e:2e:8b:22:c7:1f:bc:5a:7a:4f:
         18:8f:98:c6:9e:80:01:28:25:4f:b4:bb:c6:84:e7:ff:98:ce:
         3b:91:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----