Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          Mtxi0TCBdO3D+OZ5BfrwsqwMTx8Cq52sw7JeEOlUNN8=
Subject key identifier:   67:2B:58:63:4B:D5:21:71:A5:69:DF:C7:32:3C:FE:CB:07:F6:5A:8F
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       01962E98D3D1B71D148D897376D35DCCFD71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: MABec3iy9EEP/hbW2DCnykKk125ZVruzKDkZ3GvhGio=)
                          2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:d1:b7:1d:14:8d:89:73:76:d3:5d:cc:fd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=672b58634bd52171a569dfc7323cfecb07f65a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:3d:fd:2a:5f:59:ca:8e:eb:31:1b:98:56:
                    bd:9a:3b:d2:77:63:67:17:b4:c6:ef:78:7a:d8:a3:
                    3d:91:c5:d7:9c:1e:2c:5f:5c:83:1d:48:53:b5:51:
                    1d:b9:45:ec:f1:e1:d9:c5:46:50:c7:68:07:82:3b:
                    cb:89:8c:4b:e0:eb:8a:a3:6a:f7:8e:32:38:32:48:
                    a3:2a:1d:54:0b:e1:06:14:a6:57:6a:78:8b:46:e8:
                    bf:1e:b4:e2:5d:6d:c6:ff:49:9c:a6:e8:75:9f:a6:
                    e6:3d:5c:0c:03:35:09:cb:56:56:07:5d:a8:c5:ef:
                    a2:80:cd:94:99:b1:c7:1f:69:b7:7b:bc:52:57:2f:
                    6d:09:16:f8:4b:84:c5:27:d4:90:5f:8e:ab:14:52:
                    c1:1d:96:cc:2b:ba:88:30:e9:a5:df:3a:b8:09:fb:
                    96:bc:fa:21:72:84:b7:31:eb:97:e8:46:6f:10:2f:
                    f5:12:2e:c9:a9:30:70:24:93:a3:25:00:35:1d:2c:
                    fb:75:1a:cb:3c:fc:04:79:94:1a:d0:13:87:a2:0e:
                    87:bf:ce:a6:fc:49:72:64:71:41:f2:a3:75:99:39:
                    cc:6b:f8:26:eb:69:9b:a7:dc:15:3f:41:5d:df:9a:
                    6e:d1:d9:b4:fc:de:59:a3:e1:19:04:df:35:aa:c8:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:58:63:4B:D5:21:71:A5:69:DF:C7:32:3C:FE:CB:07:F6:5A:8F
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:66:4c:dd:b4:60:43:39:8b:b4:17:d5:77:87:72:57:77:a2:
         6c:1e:fa:f2:c1:f2:00:58:4f:78:87:e0:67:7b:a6:4f:cf:f5:
         7e:13:ee:df:60:87:90:3f:96:1e:25:4b:09:cd:20:21:79:f0:
         74:95:9e:7b:55:e3:d0:55:c6:fc:c8:af:c5:e7:05:80:8c:67:
         a2:b2:50:cd:4d:9d:0e:5f:a2:aa:d6:ad:bb:6b:79:a3:51:d2:
         5e:72:75:f9:8c:29:cc:e2:19:8e:20:43:ea:29:3b:72:a8:ed:
         c0:82:3e:71:ad:05:1f:b2:77:29:80:a4:df:85:b4:0c:65:63:
         16:88:76:94:25:7b:22:50:e2:a0:a6:53:c5:74:7f:a4:b3:d0:
         e4:b0:10:94:33:35:ec:22:f0:8e:cc:22:a0:41:04:f3:06:d4:
         f1:d3:24:76:2a:33:54:8f:f7:e4:0f:2f:38:f0:2a:e6:46:cb:
         1b:61:27:92:c3:46:99:69:32:cf:6d:fc:52:8a:2d:31:b4:72:
         c0:6d:8e:41:9f:82:22:f2:14:d8:9a:38:95:1d:fd:32:f8:29:
         d4:95:32:b5:71:30:44:07:b0:d8:e3:bd:75:ca:a1:04:df:8d:
         fb:59:2d:ae:da:58:cf:b2:96:b4:35:e7:47:2c:80:b5:63:cd:
         b5:ac:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----