Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          wncYNjn4inaD5GTFtBc+3obQY9EZRHY4JxZYLz0dtQU=
Subject key identifier:   2F:BC:A4:3C:9B:C0:77:4E:8A:7F:D3:43:6D:59:69:3E:15:61:F2:E7
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       01962F7494EBCF5C222FBD84C99F014D254C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 1nNXrg9kNJmrbwr01_wdlr4zRG8.roa (hash: jP5XT6aNraFgRF1RUdhNykj84LWIdETmEVMazBCC7NY=)
                          2: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: mS+RHGIUgtO4Ss82VXVSBqueuK8NqsBz5SNPDPPvsSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:eb:cf:5c:22:2f:bd:84:c9:9f:01:4d:25:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=2fbca43c9bc0774e8a7fd3436d59693e1561f2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:63:65:ef:87:e0:b6:73:cc:ef:55:a6:f3:
                    1b:75:3e:fd:fd:e9:c1:e8:66:6b:48:e4:13:53:c8:
                    2c:2e:ff:6d:8a:e5:68:58:83:0e:2a:9e:4b:c3:8e:
                    41:f4:12:8f:5c:26:f8:bf:5a:45:23:d8:2b:05:ff:
                    ae:e0:b6:d0:5e:67:c7:cb:ea:eb:7a:77:a5:b3:d8:
                    fa:69:52:48:2e:5e:be:da:cc:06:39:95:14:39:9a:
                    c4:63:6d:38:39:39:be:1c:26:bf:fc:43:61:89:2a:
                    e4:0d:0f:46:83:e4:cc:63:0c:18:89:ee:a7:e7:d0:
                    7c:bf:db:29:d2:d9:9c:4e:2b:b8:a5:50:15:fa:fd:
                    9a:ee:ca:b1:50:c4:6b:3a:e9:94:c9:10:2a:d4:77:
                    c9:de:87:26:76:72:30:d3:cc:33:43:0f:28:9c:72:
                    c7:cf:05:81:d9:74:17:13:66:af:45:8c:37:56:03:
                    c6:db:d6:9d:07:1a:de:97:9a:da:be:12:52:b1:cf:
                    4e:3e:99:eb:4a:62:8d:8e:e1:80:42:ed:66:80:ae:
                    c6:ca:78:e2:1f:00:94:99:00:dc:c3:cd:5a:d1:53:
                    88:8f:d0:c8:99:52:db:09:9d:82:72:ae:d4:06:a0:
                    05:eb:27:27:27:25:f8:23:6b:02:8f:42:84:e0:4e:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BC:A4:3C:9B:C0:77:4E:8A:7F:D3:43:6D:59:69:3E:15:61:F2:E7
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:58:cb:56:f2:cd:09:e7:31:d3:dc:03:3b:ea:91:b4:cf:
         b5:95:7d:a4:fa:ad:8e:a0:dc:91:b6:66:2a:c9:83:ad:ac:8f:
         ae:e4:85:f7:84:ce:c4:15:68:e3:98:5d:35:79:59:63:a5:a3:
         50:06:62:46:3c:42:9a:a1:c4:c3:b4:81:19:48:02:e7:47:87:
         6d:5e:92:c5:fd:35:1d:8e:79:de:5c:44:9c:f9:6d:59:ea:53:
         b7:48:84:13:3f:8a:b2:d0:4a:be:90:f4:a1:e2:e1:e0:98:8f:
         b9:ac:a8:e5:db:05:a5:65:55:00:54:d7:06:d9:54:15:6c:e0:
         7f:e8:48:83:7c:09:ca:82:98:7b:86:4a:56:62:d6:3d:8f:06:
         52:66:86:7d:c4:0f:42:ab:86:f5:3a:8e:af:bd:10:02:55:26:
         8c:1e:af:db:88:90:ab:e0:c3:b0:95:3c:ca:66:2b:bd:50:bb:
         39:0a:95:e4:40:e8:17:b6:12:cd:dc:cc:fd:ce:70:70:91:b9:
         89:cd:55:64:4d:a1:76:94:03:57:e7:fb:bb:68:91:91:ed:b5:
         37:66:ac:7f:c4:ef:38:fe:e7:6a:8d:f0:cd:0e:22:ae:79:35:
         bd:1c:90:90:0c:b9:67:ee:53:54:fd:b9:4b:8a:4d:8e:0f:3b:
         36:51:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----