Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File:                     CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier:          5GrggxUPavNVeFBgGPMI2rz50B1KL1/1zVoeb+m6td4=
Subject key identifier:   1A:44:04:60:26:DB:43:09:6F:73:EF:65:3C:FE:77:B5:E0:EB:DA:E2
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer:       /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial:       01962E2B0463E2F6BDBC92BB2FDBED300BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 7gE45KfXQALOMAUGdb2BAregZuQ.roa (hash: FrGkbAlx02b1cSATN7WbBjpuh48y5i0oZZPxwkdVo9g=)
                          2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: 6quBmR2L29zUnqOtSg94UXlt7zcDbiu6G3IhTm3S5OE=)
                          3: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:04:63:e2:f6:bd:bc:92:bb:2f:db:ed:30:0b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=1a44046026db43096f73ef653cfe77b5e0ebdae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:97:0e:cf:f7:a5:6a:f6:b6:fd:ea:0b:a9:
                    2e:fd:03:32:6a:5d:df:4c:48:3b:c0:47:f0:ec:e8:
                    0a:7a:2d:2d:63:9b:c4:c7:6a:67:3b:ca:37:d1:b8:
                    ee:87:27:30:dd:42:b2:dc:56:bc:44:6e:d7:51:a0:
                    a2:4b:0b:4a:64:08:73:eb:8c:d4:ae:e6:15:52:3a:
                    80:ee:33:21:fe:47:f3:67:b8:3f:3f:ed:3c:db:d0:
                    2a:df:3e:4f:86:87:13:67:67:4a:59:93:0d:82:f6:
                    e1:f0:f4:88:c5:a8:86:2c:37:2d:62:59:51:63:4e:
                    32:27:43:72:32:f6:a2:4d:43:ff:c0:b2:f8:52:49:
                    4d:21:67:03:e5:8c:fc:87:7a:1c:1d:cd:55:60:30:
                    bc:cb:33:df:a1:b4:f3:b8:b6:96:9e:96:06:9c:7a:
                    bc:6b:50:b1:32:a3:8f:ba:bc:b0:ff:99:d7:b0:1e:
                    67:f9:08:9d:76:1b:d1:66:a1:ba:07:cc:59:57:fe:
                    55:37:24:15:7b:07:a3:a3:05:70:b0:ad:17:e5:a7:
                    a7:3c:30:7c:28:01:93:d3:56:b8:a0:7f:cb:b3:b5:
                    33:b2:1c:35:5b:c9:ad:ff:2f:a9:ca:ee:09:b2:2a:
                    f3:ad:66:3e:d4:80:8d:2a:c4:a7:20:c2:5b:9b:20:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:04:60:26:DB:43:09:6F:73:EF:65:3C:FE:77:B5:E0:EB:DA:E2
            X509v3 Authority Key Identifier:
                keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:7f:2d:b2:ca:67:df:59:87:f0:59:e2:07:2f:b2:f5:a1:
         a6:27:18:f7:14:1b:59:28:31:7b:d0:3b:1d:7e:8f:e9:ad:67:
         7d:63:2c:d2:a5:cf:1c:72:36:71:50:2a:d6:c2:0a:83:ea:22:
         82:28:e3:8a:fd:41:78:b9:ce:36:a7:95:ca:8d:ae:fe:89:80:
         32:bc:a9:c9:74:ee:35:38:45:f2:f2:31:0d:3e:48:57:da:97:
         ec:02:a3:0b:93:46:85:74:11:d3:d7:79:72:7b:da:ce:54:c5:
         e3:5a:ef:06:7f:d7:10:39:eb:54:35:0c:0c:db:16:9d:09:7d:
         b9:6b:56:42:fc:2d:f4:19:a4:cb:33:80:ef:5b:a6:ed:83:df:
         b8:a7:0f:dd:ba:91:f1:1d:dd:7b:68:3a:b5:d1:31:b0:c9:13:
         fa:cf:0a:4d:67:3c:1a:45:14:14:29:f7:a0:6f:5c:d3:79:da:
         d1:93:6f:b8:33:a1:6b:ab:46:bb:04:eb:8d:0d:1f:a6:41:53:
         87:01:a0:80:4c:21:ea:72:30:bc:96:36:5f:90:66:d7:42:5d:
         8e:fd:8a:aa:3a:6a:26:ad:ae:92:10:a7:ef:f4:4e:a5:0f:09:
         1e:37:fa:11:d1:c9:e7:5a:f6:72:26:69:15:90:75:d3:f8:9f:
         06:4f:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----