Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          DAZ6sbam7eehCKlj0Q2kJFO22rUwKl6WJ0eRTlWNBJw=
Subject key identifier:   4A:40:3A:AC:C0:54:EC:21:74:7E:8B:C0:90:31:B6:B7:C5:70:7B:46
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       01962F0652B86A6A443A1686933F086E9A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: TTe5ejmDdbluDpThGcV81msJaRvK7qOI/AmUiDtKHZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:b8:6a:6a:44:3a:16:86:93:3f:08:6e:9a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=4a403aacc054ec21747e8bc09031b6b7c5707b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:64:22:6e:e8:b7:fb:72:ac:0f:c1:36:6c:
                    03:a4:13:0c:97:02:93:99:2b:61:ea:2a:95:37:f6:
                    fc:c3:e1:ae:09:2a:60:2e:b4:94:a1:2a:b5:26:07:
                    23:b7:b5:91:c2:3a:49:51:d2:05:01:aa:43:2a:6a:
                    60:5c:01:11:4a:7f:8b:f9:01:38:95:4d:33:be:a1:
                    a6:8b:11:c3:71:67:41:62:cd:a6:f9:9b:f4:ac:1b:
                    ba:85:4f:bf:be:a8:06:d3:6b:e5:57:3b:d4:ac:13:
                    ae:46:0b:7f:1b:0f:cd:67:81:37:73:7e:41:e3:57:
                    80:29:2b:b5:a1:9e:37:9a:d4:f2:d6:d2:35:9d:3a:
                    80:73:e6:81:36:ef:93:b4:94:07:5a:ba:8a:96:5d:
                    fb:73:97:65:96:d6:f8:b1:5f:ee:7b:d4:1c:21:00:
                    9d:4a:a0:fb:7c:92:82:fd:3e:28:bf:62:2d:e2:1d:
                    b9:c9:0f:b2:f0:91:45:4f:89:64:16:c3:fe:ba:c2:
                    46:ff:58:03:de:b9:75:f9:4e:bb:10:e3:c8:44:85:
                    1d:c6:ab:f5:63:32:73:0b:d1:b9:fe:a1:42:ae:04:
                    20:2e:f2:38:bb:f7:08:67:05:42:ba:fe:28:a0:09:
                    96:33:ff:d5:11:c4:03:15:d0:81:de:60:60:4e:f4:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:3A:AC:C0:54:EC:21:74:7E:8B:C0:90:31:B6:B7:C5:70:7B:46
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:58:1d:bb:e2:62:dc:a3:3e:7a:d3:1e:c6:ec:9c:b8:65:
         5e:63:63:82:70:4d:a6:ac:35:fa:cf:f0:2f:81:f4:f7:dc:a6:
         a8:8f:36:aa:07:3c:96:9f:ab:b8:c3:55:9b:df:17:ee:29:b9:
         71:33:8e:26:9f:07:46:5e:cd:f7:ee:12:f9:84:86:69:04:ed:
         03:9d:9a:95:82:54:9e:25:ea:30:07:15:16:a3:06:5b:22:c6:
         4b:8e:f7:70:68:ff:96:97:a9:1c:94:e7:7c:ac:25:f1:fd:22:
         51:f9:3e:d1:44:0a:d3:48:d8:0d:37:1a:e6:f8:7a:63:d6:7d:
         61:2f:3d:24:c9:d6:54:92:27:5e:15:bf:07:64:80:fe:95:3f:
         36:41:94:e3:d0:36:d8:78:92:34:1b:ba:b0:24:62:7c:ef:e6:
         59:8d:fc:8d:86:eb:d8:b8:49:44:19:f1:d2:da:8a:9c:6d:7f:
         cd:65:95:7d:13:d6:72:19:df:8e:9c:2c:8c:c7:29:a6:7d:03:
         14:e0:98:48:2a:91:82:23:e5:7e:de:ed:a1:a2:0f:e8:14:bd:
         69:6c:5b:c9:7d:9b:e7:7f:9a:e4:b1:af:24:f5:fd:18:ef:3c:
         30:ed:c2:e2:25:da:37:c2:7f:60:bf:03:42:b3:eb:6e:b1:d3:
         96:92:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----