Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File:                     57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier:          9fD9Mn30qx60tJqmqreU6jjUjCJngEb5Jn7SQ4tt5/E=
Subject key identifier:   9E:52:25:0E:24:9D:82:60:59:80:7C:83:6C:63:A5:96:4A:D7:6F:E7
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       01962E2AB90542B510622A9882DF1FB82BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: 1jFB9l0Jkj9x/s55VqUfiG7I1eKXPIXYChDoj/bLXxw=)
                          2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
                          3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:05:42:b5:10:62:2a:98:82:df:1f:b8:2b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=9e52250e249d826059807c836c63a5964ad76fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:a8:f8:9c:1d:58:07:96:18:73:47:2d:3a:
                    20:39:f2:2a:f7:1b:72:b9:9f:05:f6:64:26:4a:12:
                    a1:ec:ac:03:55:97:d2:4a:59:9c:25:1f:14:9f:b7:
                    32:d0:4c:83:db:20:fc:ab:11:84:bd:a1:27:50:d8:
                    87:36:4d:29:3b:77:1d:c7:ec:ab:78:a5:9c:a4:6d:
                    11:f5:9f:23:2f:0c:a1:1f:bd:bc:1c:02:7d:73:cb:
                    b5:8c:5c:54:95:bb:00:ff:82:13:bc:c0:44:6a:fe:
                    c4:09:42:51:a4:8a:3b:9c:57:ad:4d:d8:83:2d:85:
                    ab:72:7d:5d:55:3c:0a:c5:83:03:7f:39:43:d2:4c:
                    5e:58:70:ae:e9:93:03:83:fe:cf:79:42:38:7c:f0:
                    78:d0:af:4b:dd:34:f5:c1:9c:d4:70:58:68:3e:c0:
                    17:a9:78:3e:13:6b:c1:3e:88:83:20:48:fe:67:8e:
                    82:6d:6e:f1:94:d7:d7:e6:22:4f:59:71:81:bf:3c:
                    2d:eb:ef:85:e9:ce:b3:fa:a5:ce:06:93:bd:d4:f9:
                    48:ee:d1:8f:e6:9b:6e:02:7b:0f:89:41:eb:db:cf:
                    ad:d9:4a:6d:a8:c5:97:6b:fd:2b:fc:5c:9b:d5:57:
                    00:9a:ea:f7:73:20:58:57:6e:a7:d3:ce:87:db:47:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:52:25:0E:24:9D:82:60:59:80:7C:83:6C:63:A5:96:4A:D7:6F:E7
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:27:a5:ae:4c:17:e8:3d:7f:e4:5e:e7:6f:b4:fb:b1:46:
         c3:89:5a:77:7f:e8:30:04:ac:72:9f:ef:3c:77:63:ab:27:05:
         08:e5:87:af:01:21:2d:6e:77:6d:b1:9a:51:b0:9e:6e:55:f3:
         84:51:3a:5b:27:67:0a:a1:dd:a6:d2:0f:38:5c:23:45:3b:53:
         d7:6f:0f:a2:18:5f:47:70:09:03:69:4e:dc:47:06:10:41:8f:
         1e:0f:72:52:79:80:32:aa:5f:d5:df:eb:e6:b4:2b:d5:4e:db:
         e2:57:84:d4:33:1b:66:f4:c8:cc:19:bf:d8:1f:d2:89:f1:5a:
         af:4d:e1:dd:e5:d2:df:d5:2e:31:ab:15:03:12:c5:22:03:15:
         d0:3b:82:16:cf:e1:0e:98:3e:31:ee:52:db:b4:1b:c8:82:da:
         c7:61:8b:dd:f4:0e:40:cb:df:84:b3:2d:0d:a6:c2:0c:27:02:
         76:2f:1b:25:a8:9d:93:2c:68:e0:28:69:6f:4c:5d:29:a9:ec:
         c9:7e:7a:de:b9:c0:e8:bc:8e:13:36:ba:c2:a2:8d:17:8b:0a:
         7c:21:91:1c:b6:4e:de:d5:46:e6:25:f0:3d:e5:13:f8:82:a5:
         ee:e4:13:86:a6:6f:b1:40:31:cb:87:4a:9f:a6:e0:cb:a3:f7:
         9b:fa:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----