Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          0ffwS3eL1035hzpw1ceRXgPw3TxiEN3wc42UNwlO9k4=
Subject key identifier:   44:A2:D4:F7:0B:BF:62:1B:E2:FF:86:AA:95:24:E5:BC:B1:B5:15:A9
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       01962E6210030C9FDAC6DF356C42AD4E79C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          04CE
Signing time:             Sun 13 Apr 2025 09:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:40 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: 8Z4vNo4/N2yalcC7PlAn3euLvpGbIor+purYSdWPUjw=)
                          2: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (hash: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:10:03:0c:9f:da:c6:df:35:6c:42:ad:4e:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Apr 13 09:01:40 2025 GMT
            Not After : Apr 14 09:01:40 2025 GMT
        Subject: CN=44a2d4f70bbf621be2ff86aa9524e5bcb1b515a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:4d:7d:61:8d:4e:10:c9:eb:88:7c:50:f2:
                    24:ea:25:a8:9c:15:84:f2:eb:0b:46:0a:16:6b:28:
                    2a:76:0f:b2:b9:53:ab:4c:18:55:c9:e8:81:ea:0a:
                    ed:ea:9f:58:a9:3d:03:16:63:9f:cb:c1:7f:47:20:
                    0a:37:a1:16:05:e3:6e:a5:b1:71:4d:41:07:92:5e:
                    8a:df:d7:6c:e3:6a:24:d4:84:31:97:82:73:dd:db:
                    5d:38:78:60:28:32:1d:53:95:b5:56:97:a3:cf:bd:
                    6c:48:4d:72:9f:1d:76:4f:89:eb:3e:9e:49:04:8c:
                    3f:b3:d2:f5:a7:17:0e:85:92:c2:07:6c:2f:31:9d:
                    28:41:c0:38:ac:6d:ad:0b:f8:be:39:9f:2d:a4:0a:
                    2f:6a:db:43:b4:c7:1e:5e:72:f7:ea:97:82:24:52:
                    b8:95:0d:fb:30:fe:33:32:5c:df:5d:de:bb:d8:18:
                    2e:d3:e9:0e:a1:bf:a8:08:9b:2e:24:6a:84:98:be:
                    ab:26:7f:b7:4d:be:14:63:35:c8:2e:38:2b:52:8a:
                    3f:c3:32:29:35:a9:92:df:d0:c1:a6:2b:19:f4:ec:
                    e6:63:a0:ef:d4:9f:7b:19:51:0f:1a:d6:08:ad:db:
                    4f:c1:66:eb:68:b7:67:9e:ff:3e:55:f8:85:c2:48:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:D4:F7:0B:BF:62:1B:E2:FF:86:AA:95:24:E5:BC:B1:B5:15:A9
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:25:77:9a:b5:f7:5e:bf:18:f2:1c:5f:9f:18:23:6d:c0:
         b0:3d:90:ee:a6:ca:d3:b6:bb:3a:54:c6:ee:14:52:3c:6b:ca:
         4c:56:f8:a4:50:51:46:c7:e0:aa:d1:d3:9e:60:be:b8:e6:b8:
         35:b2:08:47:08:97:cd:70:c7:29:ff:47:31:5c:02:4a:b5:9d:
         b2:f7:3d:cf:af:e9:f3:71:5c:25:5f:3c:cd:dc:3f:19:9b:10:
         b5:6b:d6:05:81:ef:67:e2:f6:4b:a6:16:4d:3d:63:20:50:e5:
         45:6f:a7:8a:e6:c6:18:5a:42:fc:4d:f1:e3:79:68:92:0f:53:
         67:73:d7:38:c0:b7:08:e0:bd:8e:16:95:8e:c5:99:d4:6e:4b:
         de:52:86:1c:41:b5:8c:d1:14:b7:d0:17:98:59:aa:68:3c:0b:
         97:41:8e:36:03:90:68:85:68:65:7c:00:10:e0:28:42:17:45:
         f2:9c:1f:70:24:41:08:1b:f5:83:1e:31:62:03:6f:43:13:2d:
         5c:a0:94:af:00:a7:a9:d7:36:a1:82:d0:ba:c7:60:ce:66:a4:
         fd:81:c5:49:b7:82:be:94:42:f6:80:4e:99:d6:79:8a:1c:f9:
         3b:4c:eb:03:6d:b0:32:ae:22:3f:9c:c6:b0:eb:c4:44:9c:1b:
         07:95:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----