Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          GwQM3xQHYVfJ6KK4w1Wk/wR+rI1hojVtFsla54vFw68=
Subject key identifier:   CB:2C:FD:7E:3C:83:BC:4A:C7:C3:A4:DD:0F:EE:44:CE:3D:16:BA:77
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       01962E99EA302BA0B055AA8647766A50AD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:40 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: 9LJuITb7Qg65BbY6St+udLOzItgZgs/tb4VXsOSdY94=)
                          2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ea:30:2b:a0:b0:55:aa:86:47:76:6a:50:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Apr 13 10:02:40 2025 GMT
            Not After : Apr 14 10:02:40 2025 GMT
        Subject: CN=cb2cfd7e3c83bc4ac7c3a4dd0fee44ce3d16ba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:5c:b2:bb:f5:7f:c1:9b:06:63:1c:59:84:
                    4f:50:43:d9:45:38:54:aa:cd:b0:4e:62:03:51:56:
                    bb:76:92:21:81:a8:17:aa:69:cf:ff:e6:e6:17:f5:
                    8f:36:95:50:13:0d:11:48:c4:8b:53:14:b4:29:5c:
                    32:6b:8a:d5:80:8d:96:73:a3:07:b5:1c:14:e6:7f:
                    5d:98:9d:3b:e1:8d:79:e7:57:3d:4a:1c:fc:be:8d:
                    71:6e:d8:64:09:09:82:13:80:96:90:d6:53:ab:6b:
                    b2:a2:6d:ef:0f:cf:f3:e9:3b:01:98:73:04:30:78:
                    6c:ed:ed:00:bf:57:dd:16:4e:b4:dd:02:7b:51:d5:
                    fc:e2:c9:e9:07:86:bd:73:e7:26:05:dc:86:31:da:
                    68:b6:3d:d7:8f:02:71:7e:e8:c1:81:17:90:e3:dd:
                    5d:47:5b:73:ea:a9:06:c9:20:42:35:98:36:5c:2e:
                    f5:77:b5:a9:ba:72:13:41:c3:49:14:52:8f:c9:89:
                    bf:6d:3a:09:f0:56:05:f7:8e:ec:3e:92:52:29:96:
                    fd:5a:08:58:8b:ff:93:ea:6a:e8:fb:e8:20:40:99:
                    85:0b:91:ed:70:4c:1d:b1:f0:95:c8:42:8f:89:1c:
                    d7:c2:4d:6a:b9:29:7c:6e:96:14:a7:4c:67:3a:b0:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:FD:7E:3C:83:BC:4A:C7:C3:A4:DD:0F:EE:44:CE:3D:16:BA:77
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:4d:a2:69:54:73:2c:55:c7:62:b4:ae:2a:c5:67:8b:10:
         87:85:79:63:40:2d:4f:d0:a4:b8:32:47:e4:69:0b:2c:57:99:
         cc:93:03:37:fd:cc:5c:9e:69:f7:18:62:57:9e:a8:f0:03:26:
         b2:4b:38:20:27:20:39:c1:5a:35:95:a4:c2:7f:07:86:1d:74:
         79:1f:ba:0e:16:16:1f:2f:bd:43:79:f3:0d:b6:2b:94:02:72:
         e3:29:41:85:a6:80:c5:0c:53:08:b4:c8:ba:88:b1:3e:a2:f4:
         e2:bd:ad:a3:82:5f:3f:47:8c:7d:13:a5:58:94:19:96:b3:fc:
         6c:fb:3f:5d:a2:73:4b:71:ee:86:ac:53:97:f0:46:b3:96:c8:
         b6:2e:b8:92:0c:73:5c:42:04:66:bb:fd:e8:b7:16:90:a7:f9:
         02:46:da:14:4f:48:86:bd:a4:c5:22:df:5f:f4:b8:5b:48:fc:
         ca:9b:df:3e:6e:2d:58:ac:f9:d6:87:81:c9:e2:47:2d:fa:90:
         79:59:b0:9c:23:01:01:45:f6:b6:c3:8d:d8:d6:69:d6:ec:36:
         58:67:cf:71:39:60:1c:10:fd:13:48:d9:12:47:92:4f:3e:c5:
         22:f0:23:c1:73:7d:f7:77:d4:5f:b0:39:c4:ad:82:44:5e:68:
         fc:75:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----