Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File:                     sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier:          CkkIMJrpBfxB9t+7QmHL39cAf9GCs8Li1J6Jx/XyLTA=
Subject key identifier:   D0:40:55:8E:7F:E1:86:A9:62:9F:E2:7B:FF:C0:49:2D:4F:E0:D5:81
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer:       /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial:       01962E61CEF06A709B62AA66E5FF7993DA2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
                          2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: wzSqeQj0tOIdTqK6WFtwj7PMgbUoDpOMzWIgyE6Vz+o=)
                          3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:f0:6a:70:9b:62:aa:66:e5:ff:79:93:da:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=d040558e7fe186a9629fe27bffc0492d4fe0d581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:60:8e:f3:ab:01:a0:d6:df:f4:eb:d8:d0:
                    56:e0:c6:82:cb:5d:40:f6:4f:7d:f5:53:39:30:fc:
                    19:33:82:fb:de:df:15:d5:c1:1a:e8:38:24:42:11:
                    e0:52:f4:0d:54:9d:c6:8a:c9:6d:0e:2b:ac:3c:bd:
                    ca:e0:3c:a0:50:01:ca:36:74:02:9b:cb:a0:48:78:
                    c6:90:26:1b:31:80:28:ed:a7:e3:db:70:b2:f3:b5:
                    4c:aa:88:76:16:bc:d3:d0:78:0b:c9:fc:a3:c7:b3:
                    4c:2b:ae:b0:c3:10:3d:3b:fc:f2:0b:af:e9:66:63:
                    2d:b2:f8:44:77:cb:5d:3b:ab:6c:a4:13:0e:f4:21:
                    c7:3f:31:b4:72:8f:b4:b2:4f:45:84:a9:ff:20:8b:
                    10:26:f0:c2:44:7c:02:03:77:fc:f3:ad:23:7c:33:
                    1a:5e:f3:68:79:c5:e4:d9:b6:b4:62:4f:cd:d6:0d:
                    ee:bd:4c:34:3f:f6:98:df:16:1a:da:0b:6a:bc:44:
                    98:ea:ad:25:de:d2:fa:67:2b:17:5e:c6:c9:e5:e9:
                    b3:86:14:da:43:63:98:5f:f5:e9:be:31:4f:ad:0c:
                    67:d4:0f:0e:54:d8:d8:e7:38:e6:d9:99:c1:60:78:
                    27:2e:12:3c:dd:27:73:25:f7:85:8e:a5:5f:c2:d5:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:55:8E:7F:E1:86:A9:62:9F:E2:7B:FF:C0:49:2D:4F:E0:D5:81
            X509v3 Authority Key Identifier:
                keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:0f:bd:35:16:29:59:77:4a:99:08:97:c4:ee:b7:7f:f6:
         f6:c0:78:bf:a8:57:bb:f2:e5:0e:75:e1:cd:21:47:d1:b9:06:
         91:49:6a:61:de:34:2e:3a:29:64:fb:9a:49:70:5d:c1:4f:48:
         2c:9e:eb:a7:a1:73:83:23:4d:23:8a:21:3c:c8:7b:fa:37:3e:
         9f:99:15:38:29:3c:15:41:1e:bb:28:c4:cd:5a:fb:db:e7:71:
         b0:a0:f7:9d:f7:b4:94:fc:b9:ca:ad:ba:7c:89:c8:ec:ad:bc:
         54:d5:74:d9:66:15:3f:6e:d4:cb:9e:90:d6:03:10:90:12:01:
         91:65:a7:20:a8:1e:de:4a:a8:ba:81:78:fa:c7:93:be:a1:34:
         22:33:32:f5:92:a2:9e:b5:87:56:52:b6:da:ef:52:ba:a2:60:
         0c:a0:b8:7e:b0:12:a2:d5:32:19:c8:ba:eb:76:de:36:bf:bd:
         90:7a:ed:6f:20:5f:2e:6b:dc:6d:bf:d5:37:0d:6a:7b:bf:b3:
         e6:3f:35:fd:c3:ad:36:f8:3b:d8:57:ef:a7:99:6f:df:6f:c7:
         23:3c:e1:92:b6:ae:28:d7:e5:9b:db:95:f3:0f:97:ac:3f:28:
         1f:b4:6d:ce:87:69:79:9c:4f:20:3c:63:a5:1f:86:80:17:b9:
         ce:62:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----