Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File:                     _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier:          ARTUYLBUNJUpqoCtLGnu4lcO6X+geBF2DGmXruorlqE=
Subject key identifier:   9F:94:28:FB:72:D4:1D:8B:F1:41:30:FB:8A:E4:FD:06:74:62:55:7D
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer:       /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial:       01962E2AE76B8C138FC932FD885407A1C364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=)
                          2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: KXk4ZZjfV6agRYdRGBHOc6EplQgJhPAdg82oRzVV3/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e7:6b:8c:13:8f:c9:32:fd:88:54:07:a1:c3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=9f9428fb72d41d8bf14130fb8ae4fd067462557d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:00:33:a1:c9:c6:df:cd:95:fe:7c:bd:b3:
                    63:1c:5e:51:be:bf:5f:95:55:20:aa:eb:04:75:ad:
                    13:e9:50:e0:44:05:47:86:c2:48:6e:88:b0:7e:d6:
                    e7:77:42:fc:f0:4e:64:72:ad:e1:2e:05:0e:6d:b6:
                    75:a7:69:3f:a6:6b:e3:08:09:8b:12:aa:c1:8c:47:
                    58:82:8c:e5:d9:0d:49:88:39:6c:28:50:ac:06:f1:
                    13:e9:6c:ee:66:9d:e7:ac:56:49:bc:7b:42:f0:d2:
                    b4:ee:19:3b:1e:68:e4:c0:03:be:06:6f:16:b6:2b:
                    43:0e:84:92:80:85:4e:39:2e:71:3e:4c:8b:67:4c:
                    8c:b3:6a:23:93:a2:cf:c5:76:10:ce:2d:f2:81:b7:
                    37:f3:5d:be:11:9a:d6:57:55:91:23:ff:aa:b4:f4:
                    33:00:f8:bc:c7:ff:62:64:5d:34:d0:8f:ff:f0:fd:
                    e1:98:8b:36:df:a3:0a:59:9e:34:1c:1f:a2:c2:57:
                    a3:32:7f:e3:5c:32:7c:e1:fd:1a:74:74:64:8b:27:
                    a4:6c:4a:b7:79:6f:ee:9c:d9:d3:06:1f:0a:eb:8c:
                    7f:7e:42:59:2b:77:8a:82:31:89:8e:75:aa:17:6f:
                    fd:1d:53:45:c3:6f:f4:77:c8:42:62:dd:74:11:e1:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:28:FB:72:D4:1D:8B:F1:41:30:FB:8A:E4:FD:06:74:62:55:7D
            X509v3 Authority Key Identifier:
                keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:c6:48:b6:e5:64:2c:a6:44:b3:62:ab:cd:0b:3e:dd:ad:
         f5:0e:62:1f:0d:f7:41:b2:16:a8:f2:ea:34:d1:43:fd:07:8a:
         0a:f6:06:6c:29:c3:58:0a:25:79:7c:fc:84:9c:30:1e:d9:de:
         cc:c6:3a:51:5e:86:08:82:17:14:0f:d5:1e:96:8a:88:7f:46:
         f3:23:c3:81:0b:c8:d2:3c:c2:36:cb:d9:9b:17:7a:23:71:46:
         d5:de:4d:4b:4c:1e:0b:d2:c6:9b:19:80:fa:4b:c8:2b:05:23:
         60:7f:ef:1d:3c:1b:52:8a:2f:e0:96:a1:af:44:4f:b7:e8:6d:
         93:a5:df:4c:d4:eb:9f:61:43:e6:e1:62:45:39:b3:e7:6d:00:
         d1:84:1e:25:ef:75:4f:16:51:3d:81:21:8d:8e:6e:2b:76:fc:
         77:cd:11:46:6b:91:2c:db:03:90:dd:13:3d:c1:79:f8:44:3f:
         80:20:36:b8:a8:ff:7f:5b:ee:52:a0:ae:1f:ab:aa:34:41:6f:
         c3:2c:f2:5b:76:e6:e6:e2:a2:d1:d8:93:46:91:19:0b:1b:09:
         5c:57:5f:4d:20:1b:14:b3:1c:7a:ff:43:bc:a1:f9:42:0c:52:
         2b:bc:4b:e8:60:85:63:ad:03:cc:2f:45:f6:c9:04:a0:29:8e:
         9e:d4:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----