Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File:                     A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier:          Ey3CcrAE/bfDas+9FrlsjnX9An2MLChFRjuR8yuLmLs=
Subject key identifier:   63:CD:B6:EC:58:BC:6D:01:66:3F:4F:C9:EB:99:FB:D6:8A:A3:47:0A
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer:       /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial:       01962F74C03861061CD680B94B507B40A08F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number:          F8
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: YK2AbQUMXnqkioGAsKaBgykrQIga8sNV90t28HX1lh4=)
                          2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c0:38:61:06:1c:d6:80:b9:4b:50:7b:40:a0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=63cdb6ec58bc6d01663f4fc9eb99fbd68aa3470a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:d3:40:17:03:ad:70:b9:73:4b:5b:91:7f:
                    fb:42:f2:82:38:f1:73:1b:16:42:76:75:7b:ea:38:
                    56:c1:d3:36:e2:54:c0:3a:ff:3e:fe:2f:d2:65:af:
                    e1:44:2c:94:65:f8:62:77:5e:fc:c7:47:06:15:c3:
                    44:94:8d:d6:1d:e4:cb:c0:9c:c8:48:ca:db:ec:df:
                    8b:07:de:81:93:7a:33:2d:03:f7:e2:0c:ad:a0:31:
                    b3:46:e0:7c:a8:35:f9:41:1d:f2:b1:d9:c1:07:69:
                    c0:a8:01:8f:78:18:ef:d2:61:53:24:d8:55:87:96:
                    d9:32:f0:c2:a5:02:aa:f8:94:67:0b:bd:a2:5c:40:
                    1d:37:4c:b1:a5:dd:c8:98:b7:0e:85:6c:59:74:89:
                    b7:a9:fb:64:39:13:ce:71:d9:b6:8f:29:1d:3d:13:
                    de:67:e6:b9:2f:db:81:50:76:26:6b:7e:13:62:71:
                    78:38:68:5f:15:1d:8f:a0:95:4b:f7:ee:62:21:e5:
                    33:aa:2e:16:f0:48:b8:89:9e:54:c4:3f:74:e4:85:
                    58:02:b5:52:df:ac:1e:3c:5d:5f:06:75:7c:0a:48:
                    9a:a7:f1:a8:c4:77:aa:b9:67:fa:8f:1e:63:bc:1f:
                    f9:23:19:c2:11:9c:f1:26:2a:11:c0:d5:57:4c:1a:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:B6:EC:58:BC:6D:01:66:3F:4F:C9:EB:99:FB:D6:8A:A3:47:0A
            X509v3 Authority Key Identifier:
                keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:1c:8a:ec:85:7f:9d:c8:20:e8:85:05:9e:01:d3:f0:df:
         c5:0a:61:05:e5:6c:8b:98:df:cc:c7:30:4c:aa:3e:d7:47:a6:
         e4:48:fa:b5:89:b7:a5:d9:5a:f3:5b:8b:43:fe:28:f2:f0:c2:
         4d:5f:14:20:37:87:23:36:83:e5:60:bb:1e:6e:15:49:75:a1:
         90:55:21:d6:c7:a1:48:7c:4c:c8:3d:28:56:1b:ed:1e:30:28:
         2f:44:cf:e4:d0:68:b0:c1:d5:0c:be:07:02:e8:2f:bd:62:be:
         97:31:1f:79:ef:d3:b5:88:00:5b:9d:62:bf:a9:92:6e:df:3d:
         ed:98:b7:17:d2:d6:55:50:0b:28:46:0c:3c:0e:7c:27:bb:7d:
         b9:9a:c4:4a:7e:22:b3:e0:82:3a:e1:dd:00:d8:7f:14:2e:57:
         f5:fc:6e:dd:b7:c9:13:3a:2d:c6:0c:f4:7b:72:f6:14:e6:3a:
         8c:9e:2f:93:ea:9b:f5:c5:93:e8:c5:ac:83:5e:b7:fd:a7:ab:
         a8:21:ab:51:64:ea:e4:4c:33:c9:1f:e0:d5:c4:7e:af:ef:64:
         ba:3f:62:5a:28:bc:c3:ac:94:c7:64:31:d9:67:ac:78:38:ab:
         97:e0:68:df:eb:d9:1e:18:08:f3:67:91:c8:b6:e2:e2:33:b3:
         94:9c:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----