Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File:                     1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier:          iaAT4eqVuC0XOXElNQfpMTXgliWmnsCvfg2W/cr21EQ=
Subject key identifier:   E8:64:EF:BF:D0:61:4A:04:49:1F:36:1A:7A:3F:49:19:E4:8E:46:D8
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer:       /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial:       01962DF3C5A71B0F9202E5223EC4FF9C1F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number:          0574
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: 3vECftmLCcVFWi/MhoUm+FHpYVEIl+NRoSVRVabWIyM=)
                          2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c5:a7:1b:0f:92:02:e5:22:3e:c4:ff:9c:1f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=e864efbfd0614a04491f361a7a3f4919e48e46d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:7a:0a:a2:10:1f:38:2f:7e:43:9b:dc:3d:
                    76:77:73:10:d0:87:4f:4b:a0:ea:00:97:27:b2:46:
                    7d:21:24:6e:11:76:04:b9:29:6b:2a:dd:b7:67:13:
                    56:a7:17:4f:2e:a3:17:eb:f1:f6:a2:df:42:34:fb:
                    36:ce:7f:57:ec:ef:c1:2d:01:d1:8a:63:8d:36:02:
                    67:3a:14:78:01:e5:89:66:c1:02:d9:be:5a:2a:72:
                    47:b9:ca:c7:7c:91:47:ae:fe:32:d9:80:5f:04:36:
                    c3:8a:8a:c6:08:c4:6b:7f:51:24:79:3b:ba:9b:df:
                    f3:11:d2:f6:4f:87:9f:bf:3d:90:46:64:3c:28:6b:
                    28:60:97:23:4f:07:ce:c6:af:bc:b4:7e:66:da:db:
                    f7:6f:c3:d6:b2:a1:ff:c3:30:0e:cc:f7:31:39:d0:
                    9a:d7:08:7a:d0:f4:de:5d:de:db:64:d0:ff:4e:57:
                    54:ee:d7:80:e1:0e:af:ae:71:0f:09:b9:b4:db:14:
                    df:ab:5e:f6:a4:b2:cb:d6:4b:31:25:38:e4:c1:7e:
                    e4:8d:d7:88:7a:92:3e:a4:84:c2:58:6d:26:19:18:
                    60:19:21:17:aa:ba:22:fc:2d:5d:9c:c0:d7:30:65:
                    61:8a:ad:d8:f9:67:75:af:f6:36:07:f3:1b:30:dc:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:EF:BF:D0:61:4A:04:49:1F:36:1A:7A:3F:49:19:E4:8E:46:D8
            X509v3 Authority Key Identifier:
                keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:74:c5:6d:9e:c0:ab:4f:90:79:cc:54:b9:2d:26:7b:76:
         ca:c0:a4:21:5a:de:e9:ca:e3:95:b2:c7:ac:0f:2e:1b:bf:5e:
         70:e9:f9:b7:d9:38:57:e8:cf:90:ee:c1:a3:a5:c8:f7:6a:ab:
         71:0d:36:db:8d:94:aa:0d:14:b2:80:ac:20:2a:6d:7f:72:dd:
         ae:65:11:8d:25:c7:a4:6a:99:91:3a:8b:80:e4:f5:3b:ca:39:
         98:2a:ec:51:ad:e1:c5:1c:86:9a:ab:af:66:0b:83:41:10:15:
         23:51:6b:6b:ce:bd:16:96:bc:51:74:f2:eb:68:5f:70:46:0a:
         90:75:6a:f7:26:f5:b4:6f:51:fd:47:0b:84:5c:1b:07:b7:fb:
         63:d5:4f:36:1a:e6:73:3b:e0:f1:46:71:8b:1d:f1:42:0c:81:
         8c:a6:68:e9:6c:72:40:32:81:8e:74:3d:5c:71:72:dc:fe:36:
         7e:39:d7:80:80:e5:7b:cc:05:73:c2:f3:3f:a4:2c:77:6f:98:
         43:da:46:66:4c:f4:63:cb:63:eb:2a:bc:c3:4b:cc:7a:f2:65:
         13:f0:7c:e8:d2:91:e2:e2:ba:f9:b8:3c:11:71:df:03:0e:3f:
         df:40:4f:19:e4:0a:3c:8a:d4:2b:8f:d5:62:ce:01:25:b7:10:
         47:36:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----