Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File:                     S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier:          M7ybLdjOuGQPXtF4zjfm3UniPXpj1Yo7kADJS6b/J0s=
Subject key identifier:   EB:CE:F1:99:02:51:01:71:31:7E:A5:E9:04:F0:11:E2:35:1B:9A:6D
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer:       /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial:       01962F3D82A5A19B3D3EEE3C5DA9DE64DDFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number:          062B
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: cH4noNxX2sncYfH2yE70vfF/dOOCZQe+HgTqkJAnEio=)
                          2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:a5:a1:9b:3d:3e:ee:3c:5d:a9:de:64:dd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=ebcef19902510171317ea5e904f011e2351b9a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:65:63:bb:c9:d0:aa:2f:b7:cd:e2:51:85:
                    e9:63:03:15:27:94:9b:d5:67:a6:d8:db:c7:89:b5:
                    24:23:94:d3:9e:43:7a:4f:f1:6b:91:7d:4c:98:62:
                    19:e2:9c:a4:e5:8d:0a:82:5e:b0:4e:10:a4:3a:cc:
                    32:41:b6:06:41:84:76:eb:b3:01:75:41:f9:19:aa:
                    c2:bb:54:47:6b:54:74:71:0f:c4:d5:f6:f4:b9:e6:
                    be:00:d0:e9:0c:9a:38:19:a5:05:1d:d4:60:fe:44:
                    49:07:84:64:22:e9:b6:80:4f:56:22:93:4c:3e:f4:
                    64:1b:4a:33:41:42:80:67:e4:bd:03:e0:0e:bd:06:
                    cf:e0:95:3c:0c:38:ca:60:72:6d:65:c6:6b:df:8f:
                    f8:f5:32:12:17:a0:1e:6c:c4:50:07:05:97:f4:5c:
                    44:10:1d:40:30:06:74:d7:1f:7a:ba:09:17:81:43:
                    a8:d6:ef:37:22:37:0f:d0:f5:31:23:20:47:91:b6:
                    7f:26:ab:2e:ef:a1:08:d8:6d:5a:d8:8c:ce:63:1b:
                    d9:62:a6:91:94:7e:a8:07:ec:92:b7:9d:ea:47:1a:
                    67:72:8f:6b:a1:10:13:6e:02:a7:2c:bb:80:bd:d1:
                    ea:72:a4:89:89:bf:61:13:91:b0:1f:fa:35:30:4a:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CE:F1:99:02:51:01:71:31:7E:A5:E9:04:F0:11:E2:35:1B:9A:6D
            X509v3 Authority Key Identifier:
                keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:cb:56:1e:0f:6e:28:e4:6f:1a:f0:79:97:83:84:14:ba:
         87:07:4c:7a:c4:61:01:24:55:3f:d4:99:10:d1:7e:2d:af:d7:
         1e:fa:f2:a4:d6:15:79:5a:0d:af:1b:64:17:e3:bf:06:e3:96:
         32:f5:d9:40:7b:b8:4f:e8:3c:7b:7a:76:b2:e6:4b:6c:29:2f:
         0f:3e:0a:33:2e:01:9d:46:7e:8a:75:95:35:a6:94:8b:cc:70:
         af:ee:fc:cc:a8:dc:a0:15:a3:68:45:7b:ac:4b:8e:e1:e2:ce:
         91:9a:a9:3f:27:a3:c2:47:86:da:cf:0a:d7:0f:38:f5:76:66:
         b8:ac:10:1a:4c:8c:7a:a2:e9:a6:c2:6a:2a:0c:f6:a3:77:2a:
         bf:2c:92:18:ee:12:7a:d5:03:7d:25:dc:d5:ea:5d:de:52:c6:
         4a:18:7d:ea:65:a9:25:03:ff:08:1a:5f:fb:84:ac:a7:47:49:
         e3:ca:7f:32:6d:9b:6e:2f:d2:db:72:fb:e5:81:34:ff:1b:22:
         83:b2:2e:14:2a:e8:d2:f5:30:48:92:f3:9f:b5:1a:af:69:09:
         ae:dd:e3:56:7b:44:48:f6:7b:10:86:19:3e:e1:3b:f7:8a:b5:
         4e:be:ec:82:76:e0:15:92:fc:7e:c0:3c:41:1a:36:02:9e:8a:
         3e:ea:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----