Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File:                     4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier:          jxU1YIsFSU0UPhCZK3qFtDofeL16T29Ooc/6zwxVmC4=
Subject key identifier:   50:9E:98:C6:CB:4C:0E:45:F2:1F:0A:D5:2E:FC:73:75:BF:93:54:B7
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer:       /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial:       01962F073BC5D45EE646A0A40D54CC218822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number:          0FAD
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
                          2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: 4gbNoXZd+HSFr4Y8VEQrwtgFriJXsuIeM/SWudBjhn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3b:c5:d4:5e:e6:46:a0:a4:0d:54:cc:21:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=509e98c6cb4c0e45f21f0ad52efc7375bf9354b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:a2:01:5b:15:e8:09:c9:14:c2:c1:0a:23:
                    8f:c5:6f:00:2c:22:3c:fd:28:6e:5d:3b:8b:5d:2c:
                    0b:5a:b5:1d:b9:3c:54:79:d3:6d:32:5b:19:2f:49:
                    5f:9c:e2:ec:6a:fc:4f:a3:c4:a8:da:4b:57:5c:b1:
                    b5:37:a2:ff:5b:a7:ac:58:aa:5f:96:71:61:1b:f7:
                    4b:cd:86:23:b6:67:9d:94:11:83:95:15:af:c0:b5:
                    7b:ea:d6:a2:60:f9:a3:eb:fb:4e:ec:1d:1d:3d:df:
                    65:41:0c:93:94:36:06:25:f6:51:54:f0:e4:0e:72:
                    83:e6:dd:bf:73:55:4e:13:01:26:dc:5a:2b:42:b9:
                    ee:a1:8e:36:2a:b1:39:87:28:fe:36:64:fa:08:80:
                    8a:13:9f:e6:b9:ca:31:04:ad:e1:b2:48:e6:54:59:
                    e2:d7:b4:18:7c:39:f0:d7:0d:ff:54:18:5f:3e:cf:
                    27:09:a0:67:82:8a:43:e2:97:df:d5:e8:b2:fb:f7:
                    10:f5:91:cf:fd:40:76:2b:24:00:85:82:50:6e:48:
                    c3:0d:4f:36:6f:0e:d0:47:4a:3a:94:5a:cb:82:d8:
                    30:33:9d:d5:3b:e1:4e:a3:cd:06:91:9c:db:dd:3f:
                    18:13:63:9c:4d:c4:47:c5:bf:c5:5e:0c:7d:ed:6f:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:98:C6:CB:4C:0E:45:F2:1F:0A:D5:2E:FC:73:75:BF:93:54:B7
            X509v3 Authority Key Identifier:
                keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a1:1a:30:bd:ac:8d:1c:0f:b9:ec:cd:09:7c:90:12:44:cc:
         a6:14:2d:b2:3d:50:fa:4a:18:21:0f:59:bd:50:77:cf:3a:32:
         9b:f1:3e:09:3b:d6:24:92:59:3e:61:c1:a4:91:84:a9:db:a2:
         03:71:28:a1:fb:66:f0:13:76:ea:17:8e:23:66:98:da:c0:5f:
         70:1d:c8:39:25:93:7e:55:13:cc:32:9d:db:51:39:89:4b:1e:
         59:6f:3c:c4:b0:8e:3c:e6:b2:31:67:55:f6:cb:fd:4e:b7:da:
         46:5e:84:a2:73:60:ad:7d:68:97:04:d5:61:fd:c3:ea:bb:41:
         77:c2:dd:d8:02:9f:32:69:b3:44:da:dd:bb:4b:24:34:d6:1e:
         4b:77:f8:ab:0c:9b:89:b1:aa:ca:e6:7e:77:db:99:ac:8b:58:
         c4:33:15:9b:ef:08:c9:ca:51:c2:a2:f3:71:2f:70:7e:e7:e5:
         65:13:df:fb:fe:76:e7:42:f6:61:34:08:83:fc:4c:6b:8e:58:
         bd:27:c9:30:65:2b:f0:09:0c:1f:a7:dc:68:03:cb:78:d5:69:
         d6:27:d1:9f:6e:0a:58:51:50:3c:1d:00:ea:a0:8d:33:9e:01:
         fb:00:2b:89:b6:55:b4:70:4f:df:bb:d6:fa:cb:47:71:39:b6:
         b3:d2:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----