Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File:                     CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier:          Vtj/WCJmaO7hNoKTdHVqSemHm3U3HED+UV8JeFPSVrQ=
Subject key identifier:   A2:73:B8:78:78:5F:5B:59:38:5D:DA:0D:AE:FB:22:02:F1:EB:42:97
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer:       /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial:       01962E99A8124C15657701D9ECA9AA2D0993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number:          0DFB
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: ISfhBgw/eqUb6BUrFz355Zp6owNfjoFwHmIUN4i7ipE=)
                          2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:12:4c:15:65:77:01:d9:ec:a9:aa:2d:09:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=a273b878785f5b59385dda0daefb2202f1eb4297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:d6:fc:0d:df:18:71:4e:ed:c9:d7:96:01:
                    89:c6:c5:b8:0c:e9:d6:61:89:46:9a:5c:89:3f:40:
                    d4:cf:ab:8a:37:90:53:cf:e1:70:24:84:aa:9e:d9:
                    7c:e5:86:63:40:bf:9d:6b:14:60:bb:23:f3:85:c4:
                    18:e1:db:0b:2a:49:df:0f:12:2c:2c:b7:81:67:6c:
                    83:d6:0e:3c:bc:88:18:0c:8b:35:b1:4c:81:87:28:
                    bb:ec:e0:00:54:ff:a6:d9:44:15:ac:15:e3:67:38:
                    1b:89:d4:ac:89:33:18:b4:c2:c2:d8:a8:b3:6e:e2:
                    f9:de:e3:5e:57:48:72:1a:e3:a1:41:0d:5a:5a:5a:
                    42:01:15:8a:c5:6b:6b:3c:4b:88:0c:04:a1:ad:4c:
                    2a:1c:95:b6:08:7d:51:77:e4:c2:58:62:47:70:88:
                    45:97:17:9a:39:f1:85:13:7f:06:6d:6b:07:25:26:
                    01:e5:08:03:dc:ff:07:8f:c1:56:04:dd:a4:f8:79:
                    d2:66:47:61:85:89:7e:49:a8:c4:01:98:73:db:e3:
                    59:da:14:09:09:11:57:a4:c8:4f:fe:91:6b:b9:d0:
                    16:e0:61:ad:0a:b2:88:63:38:ca:8a:20:a5:f7:fd:
                    b6:25:0f:64:54:5e:57:8a:d7:0d:5a:31:5d:bb:66:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:B8:78:78:5F:5B:59:38:5D:DA:0D:AE:FB:22:02:F1:EB:42:97
            X509v3 Authority Key Identifier:
                keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:13:33:b4:f0:f4:8c:e4:80:d2:d0:b7:51:1a:e1:bc:13:
         eb:cb:9c:54:2f:7c:b0:11:53:4b:02:83:c2:3a:8e:01:fc:3b:
         ab:98:81:e7:02:dd:ab:be:e6:7e:51:06:88:72:81:c5:c3:e8:
         c6:88:2f:66:a3:ee:13:fc:30:7a:4e:69:13:a5:03:74:f6:ce:
         d9:62:6e:ee:1e:89:04:52:2d:c9:7e:f6:3b:80:b1:1c:02:e8:
         31:87:f4:83:69:2c:15:00:cb:94:19:c7:15:0c:90:c5:72:72:
         c4:74:2d:1d:45:b6:e0:37:91:2f:e4:4d:ca:8d:db:1f:ef:3e:
         73:81:b5:1b:a9:1a:18:0e:38:a6:6b:45:15:be:23:61:5e:9f:
         fc:50:61:37:a4:13:d2:d6:57:fe:92:80:26:2c:07:cc:8a:a6:
         c6:5e:a1:ab:24:e4:38:21:e8:b3:3d:7a:09:0e:fc:92:3a:0e:
         1d:b0:78:49:70:ef:76:ce:ef:42:7e:18:20:ef:a2:cb:da:c5:
         ed:35:fb:ee:d9:27:dc:cd:0d:b0:a8:19:8f:69:61:9b:8b:22:
         87:7d:f3:0c:44:5e:48:c8:42:95:f8:10:47:8c:57:bb:20:d6:
         1f:be:3c:89:04:d7:72:24:33:af:67:c4:0f:4d:81:6e:53:ea:
         e4:38:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----