Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File:                     mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier:          5JqoJHYQtTp29GDoY/Zl3M0C5Rn0CT5S9PipZMzXePg=
Subject key identifier:   B1:1A:82:A0:63:BC:B8:81:B4:17:4E:A0:0C:BE:86:8A:38:56:A5:9C
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer:       /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial:       01962E61DC0EEFA682DA8A7DCBAF189EB2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number:          0241
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=)
                          2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: bSSagg33QPeSWW/e+bpO8FkNl+NFJwKOBHB0IUpXiXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:0e:ef:a6:82:da:8a:7d:cb:af:18:9e:b2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=b11a82a063bcb881b4174ea00cbe868a3856a59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:91:44:d6:b4:a6:51:7f:dd:6b:a1:fe:84:
                    75:2d:f4:d0:24:6e:b7:78:5c:38:be:49:72:6f:a9:
                    01:0e:48:83:1a:0a:e2:c4:79:f5:2f:cf:91:fc:fe:
                    f1:a7:19:20:fe:36:8c:33:0c:17:1d:ca:f5:a0:0d:
                    c9:50:3b:fa:e7:df:e1:c7:ce:3b:cd:3d:15:34:9e:
                    69:97:15:c9:3a:ef:1a:33:2c:5d:33:3a:ae:cf:b4:
                    98:e3:6e:80:6c:a3:59:79:25:a8:18:09:c2:43:b4:
                    a2:e8:b6:c0:81:6b:cb:be:a7:14:df:f2:b1:d8:52:
                    c1:9a:db:1d:5d:c9:9b:91:d4:21:9f:4f:b1:90:fe:
                    be:b7:07:ae:f3:44:35:92:ba:c7:a4:4e:c4:91:5a:
                    d1:3e:7a:49:83:cc:38:a3:57:18:92:77:95:26:69:
                    37:6f:8d:d8:b4:eb:68:0f:e6:8a:0a:1a:f1:2e:23:
                    a5:3c:05:40:dd:67:e3:89:a9:f3:4f:3b:d4:a3:0e:
                    b1:71:85:5e:84:f0:a4:61:28:29:3e:0d:5d:66:4b:
                    3d:96:d8:3c:d2:0a:b6:c3:c8:a6:4b:de:c4:e6:85:
                    12:10:e9:72:c1:a4:0a:f8:7e:24:ff:91:59:10:42:
                    1d:b8:c1:bc:e3:44:85:a5:57:5e:40:53:e1:8e:96:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:82:A0:63:BC:B8:81:B4:17:4E:A0:0C:BE:86:8A:38:56:A5:9C
            X509v3 Authority Key Identifier:
                keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:26:2f:c5:ce:3b:f9:d8:b3:16:6c:71:48:34:91:d2:a9:30:
         6e:e8:fe:db:30:4a:d6:d2:5f:d9:0b:76:3b:66:e8:a1:75:bb:
         fe:86:21:3c:f6:32:49:c3:f3:37:71:c1:9b:4b:ca:43:76:7d:
         4f:57:4b:78:d3:16:ad:af:25:16:53:52:a5:c2:b2:e2:8c:1f:
         9b:2d:d8:fc:a3:92:80:e6:70:82:70:83:bf:41:ba:9a:69:32:
         9f:83:92:c1:11:79:7a:57:a9:96:b5:9a:64:92:b5:aa:5e:2a:
         44:92:0e:41:d4:a3:98:51:60:93:d1:a2:71:15:b5:9b:6e:04:
         a2:42:77:14:bf:9a:50:9e:93:f2:89:6c:98:c2:c4:06:49:96:
         17:9c:ba:09:c9:99:e2:44:71:73:cf:a5:48:38:8c:dd:fa:64:
         03:f7:e4:37:a0:f2:bc:a7:f0:5c:6b:e7:fd:28:7c:17:4e:cf:
         e7:f9:ad:bb:af:d6:67:43:cf:41:2e:6f:90:e3:0e:d0:04:e6:
         28:25:c7:2a:30:2b:1d:f9:b7:c1:c0:01:9e:e0:cd:10:03:8e:
         3d:ff:67:42:9f:b9:69:45:96:ff:db:c5:ee:23:6d:0e:5c:d4:
         28:f6:0e:93:ab:30:27:26:1e:a0:d3:ee:f3:48:eb:2e:14:f3:
         20:50:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----