Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File:                     RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier:          ETLRedx/d9ISE8AaBp5ovUXAtb8t+vOwfvUoAJZO1lo=
Subject key identifier:   2B:D5:E7:15:B8:72:0A:6A:14:23:D3:C5:75:67:A5:14:23:76:26:7D
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer:       /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial:       01962E98FF5E5719AD26AB1ED90B7A2CE8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: io3FTFKm3PBGz7EweVhjHCj9uxmfRubW7YVx0IZ0M+E=)
                          2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:5e:57:19:ad:26:ab:1e:d9:0b:7a:2c:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47119a205683167925b9f04174312637b1600c07
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=2bd5e715b8720a6a1423d3c57567a5142376267d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:f0:b7:5e:d6:12:02:33:10:b1:ee:c5:43:
                    d4:bb:75:4d:72:10:9c:ea:cd:e5:e6:f7:89:2c:9e:
                    9b:0e:77:3e:41:c4:d9:f7:67:7e:5e:2d:ff:68:24:
                    c6:d2:25:d5:c0:36:05:3b:fd:f5:87:d8:7c:ef:75:
                    b2:54:a5:d2:8a:c6:7a:76:e8:4b:6a:5f:c3:81:d3:
                    f1:26:6e:b7:33:c9:a3:0d:77:1a:5e:ea:7c:21:d7:
                    23:ef:fa:ea:e9:32:0a:65:6a:17:72:7a:7d:53:2c:
                    c9:1a:39:01:90:74:3a:96:20:50:38:43:fd:86:46:
                    fa:7c:67:54:f6:2e:4a:1b:48:0d:1c:38:e7:90:0a:
                    26:f4:7e:85:1a:6c:5c:4a:57:c3:ef:ae:b8:ba:15:
                    fc:81:1a:1f:8b:87:6c:0a:55:14:da:1b:d5:ea:5a:
                    8c:09:3e:00:c9:db:51:39:39:81:19:d3:07:67:67:
                    d7:f7:43:e9:eb:a3:c2:02:ea:2e:31:88:c9:b3:0e:
                    b0:f3:a7:61:00:cd:f3:a1:e1:61:3c:d0:60:20:d0:
                    7d:06:ab:a8:c7:5f:f6:88:a8:14:1d:8e:64:96:67:
                    61:7a:9f:58:f2:03:99:2f:69:aa:b4:19:eb:68:5b:
                    6e:4e:2c:bb:b7:1c:af:13:64:38:79:5b:8e:52:02:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:E7:15:B8:72:0A:6A:14:23:D3:C5:75:67:A5:14:23:76:26:7D
            X509v3 Authority Key Identifier:
                keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:27:9c:ff:d6:57:1a:90:c9:f3:b9:84:ac:bf:bf:d3:18:
         75:ee:55:bb:d4:a9:1e:ff:07:10:43:ec:d5:4f:ab:3b:c9:88:
         d2:56:23:1b:33:4b:36:18:4d:29:c3:6b:99:c8:96:ac:0d:47:
         b8:fa:30:c7:c5:fa:da:fe:b8:2c:6f:a6:39:ba:60:c9:d0:f9:
         96:72:fb:66:6f:90:e9:ed:67:c6:a6:d4:87:27:d9:82:82:a5:
         16:d4:d1:8a:c3:6b:d9:5e:31:4a:80:13:53:78:b8:ce:79:a9:
         83:ac:46:f3:ed:3e:be:81:ea:2e:27:07:2b:f0:cf:97:6b:af:
         13:dd:12:76:50:43:f2:85:f4:5a:04:42:ff:5a:f9:3c:ad:2c:
         59:2e:8d:12:33:fe:67:0d:28:d0:e1:b1:7d:e8:c6:e0:fe:07:
         8a:20:5a:05:57:34:52:11:79:8f:59:e7:5e:14:99:92:3c:53:
         8b:e9:de:b9:45:09:62:07:82:02:fc:15:b4:cd:6e:f3:07:e3:
         00:77:49:1d:53:22:f2:7e:40:28:d0:9e:ce:97:f7:26:28:e2:
         e4:47:d1:11:5c:b6:94:7e:da:8c:ef:3a:ca:7c:4f:45:f8:1a:
         90:35:aa:37:07:bb:6d:aa:2d:1b:0b:77:b6:ee:d2:f5:f9:b8:
         2d:83:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----