Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          skcqd7G1PCMjNbeN19+sDadL9A63FDf7358tIgk6pQg=
Subject key identifier:   9F:50:B2:11:61:5F:98:26:1E:7F:94:88:C6:46:DD:7D:D3:A8:EE:1D
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       01962F3DB14BB9C54C612547D2CEF9A2535C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: 7L+jqK1+Cce+OIV5aEVqWLI45toZ3pJJI9m9pInxsFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:4b:b9:c5:4c:61:25:47:d2:ce:f9:a2:53:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=9f50b211615f98261e7f9488c646dd7dd3a8ee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:86:6a:18:5f:72:73:f7:d8:47:10:2f:b6:
                    17:84:33:69:05:f8:7e:ca:f0:5d:d3:57:81:b7:c3:
                    75:2c:2a:31:10:2c:ba:ac:67:bd:4b:87:b4:0c:55:
                    7a:ed:4b:46:cf:28:49:c3:ba:0e:eb:f8:43:58:0d:
                    6e:ed:fa:34:49:5a:86:93:3a:17:ca:34:fc:c3:07:
                    d5:99:dc:d4:5e:9c:dc:fc:c8:92:15:84:2f:de:42:
                    02:1b:c8:34:54:61:58:c8:ca:c0:79:c2:e1:92:70:
                    f2:2e:3c:32:17:75:31:b6:13:77:f1:11:3d:46:36:
                    b6:91:75:41:16:ca:0f:34:d5:3b:97:1d:c8:c4:18:
                    ba:b5:d0:47:be:64:05:c1:af:20:0b:0a:31:57:9b:
                    49:db:e9:f6:2f:89:99:0c:63:db:24:2f:84:3a:ae:
                    07:f5:d3:79:fb:41:3a:41:d9:95:61:5c:40:f7:5c:
                    ce:c9:6b:40:ac:75:d2:89:a0:07:ea:1f:10:12:53:
                    e7:54:b4:db:ca:4c:14:35:a3:e9:77:c3:d9:5c:6a:
                    c7:c4:f9:4e:70:39:73:2a:3d:13:45:aa:e9:18:a3:
                    92:95:4d:31:48:5c:ae:a1:a2:aa:3c:9a:28:ae:89:
                    dd:30:b1:ca:b7:e3:8c:98:cc:f8:61:73:f3:8e:47:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:B2:11:61:5F:98:26:1E:7F:94:88:C6:46:DD:7D:D3:A8:EE:1D
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0c:85:4d:2f:05:61:89:1d:87:98:ae:98:95:9a:fb:dc:e6:
         23:4c:c2:6a:e4:59:86:69:67:92:3f:06:3e:f3:95:af:ba:db:
         9d:cf:f7:b0:e9:15:dd:b8:a5:e9:fc:32:3e:2a:b4:06:8b:0b:
         d8:55:c4:ca:62:dd:7e:dc:9e:88:c4:b1:95:a6:55:96:d7:57:
         b7:91:ce:fe:24:52:3e:60:77:46:c5:01:f7:43:2e:69:b5:8f:
         22:fa:e2:57:97:9b:eb:f9:ba:3d:b9:a8:5e:13:8e:6d:f2:3c:
         bf:86:76:78:ca:f2:39:09:70:5a:b1:6e:46:9d:7d:e9:38:75:
         c7:e0:e1:73:20:2a:8f:a6:74:d0:6f:38:36:a1:82:7c:da:22:
         71:3b:fd:0a:cd:80:da:9a:0a:4e:79:5f:0f:8f:75:97:44:fd:
         81:63:8c:7b:9f:20:11:38:59:78:13:17:b9:71:2c:e3:eb:aa:
         51:e8:8b:2d:33:33:f1:5a:5b:97:8b:ba:77:98:a2:a5:52:dc:
         88:63:0e:d7:7a:77:69:ee:a6:6f:59:87:36:66:47:4c:34:7c:
         f3:a8:09:ed:9c:65:e6:5e:5f:c2:86:42:6d:e4:66:66:8f:6d:
         47:2b:14:da:3c:54:00:25:97:f0:b0:61:5e:d7:42:00:db:4f:
         d3:b8:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----