Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File:                     U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier:          XtctXQg1m+txlXmgaviXRGekZ3cZg4iT8VUKO2Mt8BI=
Subject key identifier:   21:A9:B5:97:F9:F8:3C:D1:23:43:D8:46:B4:B0:6A:E3:AB:3D:10:EC
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer:       /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial:       01962F74F9233349262B66D5EB4957564522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:57 +0000
Files and hashes:         1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
                          2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: nGf+HtmX8H+fGzSkI4WSCnPCh1sjI//y/QVUS3YaGig=)
                          3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f9:23:33:49:26:2b:66:d5:eb:49:57:56:45:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
        Validity
            Not Before: Apr 13 14:01:57 2025 GMT
            Not After : Apr 14 14:01:57 2025 GMT
        Subject: CN=21a9b597f9f83cd12343d846b4b06ae3ab3d10ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:49:30:8f:1f:de:22:fa:70:41:10:ef:fd:
                    98:51:6e:74:28:8d:3c:65:4a:bf:78:0b:83:6c:ca:
                    ea:80:51:c5:af:df:4b:5e:a2:f9:5a:40:b2:a5:0a:
                    5e:c6:51:bc:b2:e8:af:33:e6:f1:4c:c3:d0:a6:6d:
                    d4:75:59:13:cb:44:3a:1d:ef:56:3c:3c:76:bd:a3:
                    18:7c:06:5c:f0:53:50:74:0f:23:51:ee:03:a8:aa:
                    a2:0f:80:81:8f:34:e1:64:93:2b:fa:47:69:cf:8c:
                    47:cc:d0:b9:54:db:63:0e:3d:0b:a4:a5:b7:ee:03:
                    50:b3:27:8d:30:b1:47:7d:64:b7:d4:7f:04:f1:d1:
                    89:0d:b2:a0:a4:bb:50:37:a9:09:db:58:d6:64:04:
                    b3:76:ac:de:de:ed:4f:ec:12:03:4f:d8:4f:0c:17:
                    80:44:8d:95:a9:f7:cc:fd:3f:8d:e6:c8:9f:da:87:
                    72:28:77:a4:af:75:0c:13:21:ac:05:60:b9:9c:c2:
                    9c:2e:d9:57:6c:4a:95:1b:d2:4b:24:3c:b0:a8:e5:
                    95:e7:2e:c0:7b:f6:ad:71:01:bb:bf:6a:5f:bc:74:
                    c2:3c:04:80:f2:34:d3:a6:2d:64:28:24:1a:6b:69:
                    ba:ed:68:4d:21:cc:00:fa:e9:65:04:01:b7:3b:f0:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:B5:97:F9:F8:3C:D1:23:43:D8:46:B4:B0:6A:E3:AB:3D:10:EC
            X509v3 Authority Key Identifier:
                keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:01:a8:01:df:d9:35:c7:2d:56:e7:ed:8d:71:af:e8:59:29:
         c4:93:df:02:c6:4e:e7:c4:78:30:30:ca:1c:5a:8d:b8:68:47:
         5c:66:a5:ac:7f:1f:96:46:7e:39:32:dc:d3:5f:b9:65:c6:5c:
         00:be:bb:13:56:0c:3b:32:c9:38:30:c4:fe:d9:12:9a:1d:f0:
         80:0d:37:28:94:0d:bf:c3:b7:6c:e5:17:d2:d3:78:07:c6:de:
         cf:21:73:4f:7c:e1:30:f4:58:79:38:66:5d:c1:4d:a8:94:90:
         e3:f9:b9:d2:b7:af:ab:4d:86:8a:df:e1:de:bd:ff:9d:08:2c:
         9f:78:b6:8c:65:44:ac:c8:3b:82:7d:23:a2:47:e7:ad:b1:0e:
         ad:39:ad:e4:79:b3:05:87:a5:58:21:f1:e8:1f:94:4c:d9:51:
         47:24:93:5d:85:fc:62:7e:6b:8d:42:b7:f1:16:18:9c:81:db:
         16:e1:34:c7:77:ca:34:78:6c:32:ea:59:ae:3f:7d:1b:db:e1:
         d9:e2:c6:ca:df:d7:04:22:16:3e:1e:77:d2:7e:4a:6e:ba:b0:
         bc:9c:82:dc:4f:bd:9e:b7:53:a3:d7:a6:7f:fb:4c:29:a2:4e:
         99:55:d1:f8:ca:8e:38:79:94:31:00:c0:cb:fe:59:c6:cb:af:
         0c:f1:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----