Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File:                     s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier:          ku75ndPrJHMAu4lFp2f8aLkJRapeGv4AzCr46qpzKVI=
Subject key identifier:   28:00:AE:CB:7A:26:41:D7:2D:85:D7:C2:C7:35:92:77:CD:1E:33:D0
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer:       /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial:       01962E98BDEA30E399B3965CC97CFB0054A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: p7fBlascPl0BDzVUYAL533+sXPOiTDmUa53CYOynSQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:ea:30:e3:99:b3:96:5c:c9:7c:fb:00:54:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=2800aecb7a2641d72d85d7c2c7359277cd1e33d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:ee:07:fe:a2:8b:4f:5b:d8:80:f3:e4:9d:
                    bd:0d:bf:1e:c1:0b:48:bf:03:fd:1a:f0:13:5d:da:
                    42:1a:3c:53:32:5f:fc:15:2c:c2:99:50:7c:27:f8:
                    9f:2f:66:9b:89:c8:28:6c:2b:7a:c3:c7:d2:38:b0:
                    3f:a6:10:79:04:32:6b:73:c9:ba:2e:ba:3d:e5:7c:
                    3f:23:da:cb:1a:5a:3c:46:57:4d:46:43:7c:bd:b7:
                    de:07:51:b0:af:fe:cb:cf:b8:49:c4:8e:a1:b7:24:
                    95:eb:95:55:56:fc:c3:81:40:37:44:0b:f8:6e:d4:
                    d7:03:14:dc:b7:83:a6:f0:b3:6f:53:d4:cf:20:51:
                    86:08:c7:49:c3:32:f9:51:f7:cc:94:b5:c9:6b:b2:
                    b6:b1:03:84:d4:72:46:dd:a4:c9:33:5c:bd:1f:d7:
                    1f:9f:23:a1:ff:24:36:66:ef:8a:b6:8c:b4:1a:b2:
                    49:c9:60:18:00:6d:b8:92:39:1f:f2:1e:e0:66:d5:
                    00:fa:39:f9:df:b9:1e:e6:9e:66:07:86:2a:0e:90:
                    4b:20:8d:a0:ed:8b:b3:75:88:8e:82:da:27:a4:93:
                    b1:d9:6a:51:de:5c:a3:83:68:ab:fe:23:ad:62:a6:
                    f5:57:88:35:05:7b:f0:06:41:72:39:79:36:27:d5:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:00:AE:CB:7A:26:41:D7:2D:85:D7:C2:C7:35:92:77:CD:1E:33:D0
            X509v3 Authority Key Identifier:
                keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:69:ac:fb:b9:4f:75:6c:45:1b:47:16:5b:e3:9f:27:ce:1f:
         7f:c5:b4:a6:3b:a3:71:0f:3f:44:b4:18:48:3c:c0:8f:ed:fe:
         ef:87:21:d8:39:26:a5:9b:ec:22:a4:da:a2:7e:76:bf:41:fa:
         0f:bc:d8:a0:48:ab:9e:a8:8f:51:5d:b9:dd:82:26:bb:c1:72:
         f2:69:b8:49:7c:38:25:09:dc:72:6f:e0:55:5f:18:8b:c9:2c:
         2d:5b:a5:41:88:3d:47:9e:c1:ba:b0:63:42:dd:7e:64:47:d7:
         d2:53:09:49:6f:f1:54:b4:dd:41:7b:17:86:40:33:5a:19:1e:
         02:a9:42:38:01:3d:5f:0e:36:2a:9a:0f:33:85:f4:e6:4d:6f:
         bc:8a:10:5a:e8:f8:24:26:ea:3a:18:cc:0f:b9:a4:60:16:cd:
         2d:dd:59:b6:93:59:4e:03:4e:1a:d0:f0:25:ff:4e:52:2f:36:
         51:2c:04:19:f7:d5:47:c4:45:78:36:97:80:21:9a:ec:f0:2c:
         41:f9:44:fe:dc:82:24:31:a3:2f:f4:99:07:1c:48:78:f4:ec:
         bb:9a:8d:44:ee:00:fe:ad:2d:10:0a:ef:fe:db:64:28:68:6d:
         0a:de:4c:e4:3b:09:81:a6:c6:f4:7b:87:51:aa:eb:2f:a7:d3:
         c5:39:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----