Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File:                     9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier:          ivdVygKgM0PdqMiRNNPdf1+/wyxHvBRaG8unXzkIhk8=
Subject key identifier:   17:35:2D:03:DE:66:06:5A:C2:99:07:61:1D:BB:CE:36:D1:C2:3F:A9
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer:       /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial:       01962E991BC3C4D43DF434EFCD5875685C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number:          07E4
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: 7lgu4MtW1E4rsxkPFFAsBgVlRkR/I/UGLozcYkP38X4=)
                          2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:c3:c4:d4:3d:f4:34:ef:cd:58:75:68:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=17352d03de66065ac29907611dbbce36d1c23fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:f3:30:8d:e6:b8:19:3e:a1:ae:05:2e:45:
                    bc:52:e9:ba:db:8f:b3:0b:70:54:2b:41:1c:e7:be:
                    b7:bf:da:a2:29:a3:5a:75:8f:8b:9f:4f:fc:36:1c:
                    31:38:46:12:02:24:71:69:a0:31:74:ca:23:5c:80:
                    26:25:2e:8e:dd:29:fd:26:b3:e3:2f:a3:36:ab:f3:
                    5d:20:4f:84:1c:6b:f1:2d:91:05:59:c8:87:b2:de:
                    03:49:5f:39:e3:b2:f3:88:e4:2d:f2:40:cf:c0:74:
                    8f:ec:74:39:75:e7:ab:4a:f1:a1:a0:0e:12:b2:fb:
                    74:26:2d:d1:67:e3:f7:62:94:40:e0:af:df:03:5a:
                    6b:66:ee:2c:02:27:7c:d2:49:33:f5:e3:13:bf:2e:
                    fe:ca:4f:13:71:e0:92:9e:5b:4f:7b:05:19:76:98:
                    df:1d:9e:8c:73:7e:77:99:52:36:5a:23:6a:6a:8f:
                    b3:45:96:fb:8b:25:3d:3b:99:8c:61:f4:84:c0:9b:
                    dc:0e:4a:d3:fb:0d:46:26:e6:ef:75:62:44:ef:c0:
                    e8:2c:d0:cb:42:7f:d2:a2:76:f5:4e:b9:ea:35:d9:
                    26:d5:eb:4e:0f:77:b7:56:a6:b3:26:1f:c0:5a:f0:
                    bd:fc:6d:a0:8a:31:b1:88:52:31:ae:a7:8d:41:fd:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:35:2D:03:DE:66:06:5A:C2:99:07:61:1D:BB:CE:36:D1:C2:3F:A9
            X509v3 Authority Key Identifier:
                keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:28:17:c4:2c:8f:e1:a4:6b:ab:b1:62:b9:b3:f9:d8:97:b4:
         f9:11:10:2d:da:bc:3d:00:37:e5:81:0c:6b:8b:e0:b3:5b:5f:
         b2:d9:40:25:06:9e:12:10:40:c5:e8:ab:a3:5f:5d:67:34:f7:
         73:f1:13:3c:66:be:90:57:d4:61:87:81:78:ef:3c:15:fb:bd:
         3c:e2:b9:32:22:59:a0:43:b6:52:8e:e4:8d:10:76:b4:1c:50:
         34:42:29:3e:6f:73:37:9e:e3:4d:76:11:03:81:38:d4:36:7d:
         55:3f:bd:90:f2:74:4a:05:5e:dd:8e:29:2e:44:21:35:f9:88:
         90:64:b2:17:2a:7e:98:c7:45:31:f4:95:17:ef:7b:29:eb:db:
         6f:85:e9:67:dd:45:c7:0d:27:36:5c:4e:c3:20:ea:4d:69:09:
         54:2f:7b:e1:85:0b:a1:18:ac:13:5f:1b:04:f6:64:b8:04:54:
         0b:a4:ae:c7:14:ab:79:c1:26:98:a3:0b:a1:44:55:26:76:e4:
         bc:27:e5:54:d0:4a:9e:5c:13:16:7c:93:61:a2:39:af:df:32:
         2f:7e:37:4b:06:44:57:c3:52:9a:60:95:e2:06:4c:8f:83:7f:
         d1:f2:eb:e5:70:6c:a4:0a:4f:f1:a9:fc:b8:ce:67:46:3f:0d:
         28:b2:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----