Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File:                     mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier:          b66+ntI2N6PAxAdMuTGXDU1X9pD/gXHgBu7P3wy5cK8=
Subject key identifier:   24:4E:7A:94:E5:CA:DC:F6:17:E0:A7:1D:44:B0:2A:41:3D:2F:78:86
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer:       /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial:       01962F74576F9D0C4F0E2907F00546E7BC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=)
                          2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: H+qJWn2BciOQdNpzOtpqSqbzZogDoC9U7V9yLOMh44o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:57:6f:9d:0c:4f:0e:29:07:f0:05:46:e7:bc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=244e7a94e5cadcf617e0a71d44b02a413d2f7886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:c0:b4:5a:43:b3:5f:da:41:ce:4a:36:2f:
                    67:fd:c2:7f:ec:14:5b:c3:49:74:72:19:d1:85:fa:
                    46:2e:b4:db:e2:fd:88:f9:0a:1c:b5:84:40:69:55:
                    87:a7:ea:35:a0:ef:a9:7d:e2:e7:20:0e:7d:43:9e:
                    87:0a:a7:0f:3d:55:a8:06:29:8f:b4:28:81:b4:77:
                    26:5d:b4:cc:74:dc:16:7e:8b:2f:32:55:0a:12:7d:
                    81:5e:1b:98:3d:2e:60:70:f3:ea:97:75:0d:37:b4:
                    1f:05:78:df:5c:dd:56:02:17:f0:5d:a5:0d:75:d1:
                    c9:04:88:9a:bc:0f:09:1c:16:5d:dc:65:e6:42:e5:
                    24:ed:f5:b3:c5:68:0c:9f:9d:14:bd:f6:a3:99:9e:
                    19:4f:34:11:16:ab:4b:c5:55:47:8a:b4:13:3a:5d:
                    03:bd:80:ab:9e:61:9f:e1:28:ff:b2:65:98:48:e6:
                    a2:71:94:84:87:a0:0c:cd:fc:0c:27:44:80:a7:e4:
                    79:0c:e9:0c:d2:eb:b5:9e:b4:68:e1:77:dd:53:60:
                    4c:c6:63:6a:3c:99:02:eb:c4:64:44:68:c5:b2:91:
                    66:be:f0:70:6e:26:d1:eb:4d:ce:63:21:bb:ce:59:
                    5d:da:ba:d8:a8:ca:6e:d1:9c:e3:9c:a9:5a:26:ca:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4E:7A:94:E5:CA:DC:F6:17:E0:A7:1D:44:B0:2A:41:3D:2F:78:86
            X509v3 Authority Key Identifier:
                keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:7f:c8:2a:3a:cc:39:9a:1e:d5:4e:13:c9:f8:70:7a:db:
         e0:fd:d4:8a:69:9c:6d:fc:ba:bd:f4:4c:5d:40:ba:05:bb:41:
         dc:97:46:bb:01:97:83:11:c0:52:db:1b:a1:49:ff:5c:14:b1:
         ae:45:4e:f9:01:fd:d2:b8:ce:28:a2:10:ad:1b:f6:3d:a4:c1:
         fa:80:ba:18:53:73:ad:e4:90:31:ca:db:0f:63:5d:41:b9:ee:
         84:f1:85:10:13:d2:ae:75:2c:71:7c:34:81:18:b3:60:0f:00:
         ca:39:7f:a1:69:75:d4:b9:19:b2:f7:af:f6:b8:2f:6d:10:1c:
         fe:d4:16:82:e9:3b:26:e2:fb:97:65:7b:6d:8a:08:fa:9a:12:
         7c:16:77:00:58:f2:01:b5:4b:75:c8:b7:0a:4f:54:7d:3f:19:
         a3:7c:03:e1:58:8f:06:da:29:95:91:b6:97:48:1a:18:cc:b1:
         01:9a:75:61:ad:e3:30:4c:1f:ee:87:15:be:fb:14:56:00:2d:
         ff:6c:8f:04:7f:d3:ce:80:eb:dd:1a:6a:13:a4:48:f9:e2:f5:
         36:d4:63:83:9d:af:e6:a7:5f:93:e2:25:d8:45:3e:3c:14:fe:
         69:fa:bd:a4:5c:94:50:02:6a:b8:41:7a:21:f9:8e:6e:14:c6:
         ba:f5:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----