Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          jMFIkynG6Qazp5WZuO50sILolMEpvoyFlfWqagydoB8=
Subject key identifier:   AE:B8:DD:17:A5:6D:03:67:25:0E:45:F3:4C:41:2D:AB:CA:7C:93:77
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       01962F747BA1766381AB08B7D85B296B4838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: wJXwioq1yRfoLz10kztXkhOXYeHDPYpUoKGksK5orGA=)
                          2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:a1:76:63:81:ab:08:b7:d8:5b:29:6b:48:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=aeb8dd17a56d0367250e45f34c412dabca7c9377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:8d:8d:58:81:02:d9:bc:69:5c:df:cb:ff:
                    99:45:6c:cd:e8:20:e6:bf:d0:94:d4:49:13:90:4a:
                    3d:89:51:1d:9f:33:d4:0d:37:03:a7:20:6a:46:1b:
                    07:73:9c:c6:2e:a0:fb:9c:ce:99:ab:ba:90:ad:ad:
                    a1:78:37:19:d0:0b:c2:f7:03:de:3b:a1:a4:08:41:
                    30:23:80:8a:63:af:c5:8e:88:06:96:19:38:aa:1f:
                    31:f5:bf:98:0b:0c:34:fd:6a:85:0d:48:eb:b4:a5:
                    32:2a:9a:11:94:8b:f1:0b:ac:53:d7:8f:65:17:2e:
                    12:99:3e:bf:44:d4:63:07:72:77:41:51:16:9a:f1:
                    dc:f6:13:a1:23:50:9d:45:d3:65:7a:4b:3b:44:fd:
                    06:b3:d9:eb:59:d6:24:0a:61:a6:8c:b7:2e:55:de:
                    6a:ba:de:2f:d2:70:86:c5:23:89:5b:33:73:28:69:
                    e2:db:08:64:5c:0b:f5:35:e9:d6:ea:82:d9:89:bc:
                    c1:60:51:9b:9d:4e:de:e9:ca:fc:fc:36:70:d1:65:
                    d5:67:ba:b0:6c:e6:2a:7b:00:58:40:22:33:b4:34:
                    16:c5:cb:06:dd:95:04:a3:5d:24:d0:6a:bd:dd:0e:
                    a8:21:45:c3:c8:8e:08:67:8a:cf:50:0a:15:ca:bf:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B8:DD:17:A5:6D:03:67:25:0E:45:F3:4C:41:2D:AB:CA:7C:93:77
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c9:83:ae:ec:7c:fd:16:ec:9b:f9:48:e2:75:57:52:62:87:
         a9:1a:65:76:02:c2:d5:ab:61:3a:33:5b:01:6f:16:4d:6f:f0:
         68:3e:5e:31:7d:8b:de:8c:eb:ab:58:b1:ee:4e:6f:a6:96:61:
         14:2c:73:7c:36:64:86:ae:72:5b:53:76:35:d5:e6:9e:e8:7c:
         fa:20:14:18:8c:a7:28:f7:a9:fb:c6:42:26:51:f1:7c:7e:ab:
         85:35:86:dd:f7:5b:98:e2:b2:71:50:a5:1d:42:2d:dd:4d:67:
         01:75:0d:6c:1b:d6:e6:2c:4b:fa:be:d2:ff:83:8a:fa:b2:15:
         fb:93:05:b9:3b:7d:c6:19:f1:7e:0f:b7:2e:f6:b5:f3:0f:07:
         5b:59:0a:80:5c:e7:aa:16:b3:67:88:68:5b:01:90:31:c0:de:
         87:00:cb:d4:42:dd:27:db:70:91:6a:5c:04:4e:9b:91:22:43:
         40:ef:e2:27:d8:95:b7:c8:a0:6f:8b:47:56:6f:8c:0d:3a:ad:
         43:07:b2:da:27:38:1a:d3:5e:06:d6:99:4b:e1:50:c7:a4:21:
         a7:fd:a0:10:d8:24:7b:cc:65:aa:54:fe:6c:03:3a:60:82:e9:
         2c:7e:fe:ab:5f:ab:2b:db:57:3b:2f:c7:1f:84:8e:b6:29:12:
         a4:1e:11:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----