Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File:                     x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier:          g151BJFLeYzWSJ2m+DYUHjLcKLDVumH76laXvAC4yqg=
Subject key identifier:   EA:4D:6E:D1:58:66:DB:5B:96:AD:3A:90:53:F3:ED:4E:21:02:F0:E3
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer:       /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial:       01962E618618898007DB8DF2AE715D349912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number:          12ED
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
                          2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: yZT0ED+Em03YtAypO/pbp/t6i1AzznGBk+kbb/4Ymzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:18:89:80:07:db:8d:f2:ae:71:5d:34:99:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=ea4d6ed15866db5b96ad3a9053f3ed4e2102f0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:de:8c:33:24:1e:5a:27:c0:cf:6a:e4:56:
                    fd:c4:e9:16:6d:56:15:f4:63:e1:81:ef:19:41:74:
                    56:00:80:12:25:4c:3b:c6:aa:c7:25:cc:b9:8a:23:
                    14:e8:98:06:e0:b3:e6:71:b3:b4:8b:62:bb:6a:c1:
                    43:04:15:cb:b2:b1:fa:cc:b1:32:5c:75:bb:ed:fc:
                    13:2d:8a:a0:8f:e2:a6:6b:a9:95:52:ad:82:95:e0:
                    66:41:f0:39:d2:b0:3b:81:70:21:cb:56:84:60:96:
                    24:3a:15:af:38:b8:7d:02:f6:c9:ca:02:ba:a9:18:
                    e3:2d:83:6a:cb:f5:b8:9f:10:f5:39:d3:b7:b1:78:
                    3f:a8:90:e3:47:d6:4e:61:f8:10:fd:b7:14:39:a8:
                    20:97:b4:3b:f2:89:1c:55:ba:b1:9c:e0:ef:a6:27:
                    c0:4d:45:e0:ed:c2:96:cf:ed:65:38:67:f2:e5:8d:
                    2b:b6:28:fc:95:4b:03:0d:3d:17:cc:77:ec:38:96:
                    cb:5b:2e:7f:af:e5:c8:92:46:0f:3d:0e:de:a8:cb:
                    3b:99:d7:4c:23:0d:eb:18:e5:92:d7:53:d6:6a:47:
                    2b:b4:6a:45:df:f0:6a:8b:08:50:bc:dc:73:a6:73:
                    32:19:65:9e:0e:9a:a1:7c:b6:61:2e:69:e9:64:4a:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4D:6E:D1:58:66:DB:5B:96:AD:3A:90:53:F3:ED:4E:21:02:F0:E3
            X509v3 Authority Key Identifier:
                keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7e:ff:b0:5e:d4:b2:40:81:d6:54:26:16:9b:8e:5c:09:45:
         dc:d1:43:f0:0a:f7:38:e3:77:6e:09:69:7e:31:3a:21:fa:e6:
         3b:14:d0:8c:38:be:29:a1:4c:76:8f:cc:a8:a9:00:9f:d9:0e:
         86:ab:31:22:1e:f2:52:10:2a:1e:f5:b5:ae:4f:d5:30:3e:9f:
         c5:0b:58:37:92:5d:5e:ee:1b:f7:87:76:ea:42:76:c9:ae:7e:
         1d:72:fb:fd:15:23:cf:d9:15:4b:d3:a1:75:64:82:6d:06:d9:
         2f:12:bf:7b:39:3d:81:f2:4a:72:84:75:00:4f:dd:d4:69:f7:
         5d:5d:e3:1e:01:67:57:0c:bd:25:51:a2:fc:fc:34:ae:3e:6d:
         3a:2a:75:92:f5:f7:3e:74:00:5e:c2:58:31:d2:07:1c:a0:b4:
         cc:2e:dc:25:98:8f:00:97:3b:fd:d9:11:da:a3:88:8f:8a:51:
         b5:64:e4:f3:ee:84:27:e4:5a:50:36:f8:22:ce:9f:bf:aa:d1:
         c6:83:db:7b:f0:47:1f:db:5a:e6:6a:5f:cf:88:f2:17:0c:61:
         4f:d0:42:76:5b:34:dc:51:b7:b2:79:4e:5e:58:73:35:19:54:
         79:58:79:ab:be:f5:15:99:8b:77:5f:72:e9:e4:18:b5:d8:44:
         79:ff:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----