Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File:                     Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier:          JX6oyKnxpZeOCS/gVRtdpwfISCSWvdsa137XW0aGBxU=
Subject key identifier:   02:36:72:65:A1:A8:9F:F0:7E:1F:D1:05:DD:EA:9C:2D:FA:B0:9F:FA
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer:       /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial:       01962F0697CBAE074E854013D98AD0C0EFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=)
                          2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: YpsZ+uxhXF94aNzcm2m4bt/O9xHBIVQZDkVp+B9o0gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:cb:ae:07:4e:85:40:13:d9:8a:d0:c0:ef:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=02367265a1a89ff07e1fd105ddea9c2dfab09ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:52:1a:9a:78:ec:4e:a5:65:30:70:cb:a3:
                    52:c4:ba:d1:0f:89:9f:fe:ef:9f:1e:23:d7:db:c9:
                    e9:c6:eb:61:62:66:b3:16:66:c1:f9:56:4f:bf:10:
                    3b:e0:7a:7d:bc:f4:42:db:f0:38:63:12:3d:32:46:
                    61:8f:ad:9e:2c:c9:1b:66:89:33:b8:87:a2:c2:42:
                    46:fb:e5:aa:63:65:82:da:99:f2:4d:e5:5c:76:f0:
                    ea:24:35:d2:e8:10:2c:8f:4b:28:45:93:b9:c8:c5:
                    2f:85:66:a1:1f:2e:ea:18:87:1b:7c:67:58:21:12:
                    b3:6e:bb:25:3e:89:71:6d:1a:67:00:84:3a:2f:ba:
                    61:01:52:2e:f5:8e:6d:03:53:38:f8:72:7b:e4:fe:
                    6f:43:ac:12:b2:df:49:12:4c:7a:c5:f2:18:b6:1b:
                    9c:5c:c4:46:fa:7b:5c:d5:df:38:f5:05:27:f1:df:
                    69:82:9d:6d:30:0f:89:34:eb:f5:1d:36:b3:92:60:
                    8d:3b:f6:5d:58:ca:43:d4:49:78:f4:2e:37:e6:00:
                    28:a1:3a:3a:b3:25:fa:dd:a9:20:f3:d3:88:2e:e0:
                    cb:f4:76:aa:ec:77:67:98:54:e7:5e:ae:58:d9:dc:
                    0b:1d:dc:ff:8e:b1:85:2a:d1:5b:de:9c:4d:d9:35:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:36:72:65:A1:A8:9F:F0:7E:1F:D1:05:DD:EA:9C:2D:FA:B0:9F:FA
            X509v3 Authority Key Identifier:
                keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:45:2c:0c:2a:6f:2c:31:ad:81:cd:56:eb:81:d0:dd:48:
         10:22:18:7f:e9:d5:cd:99:38:31:df:98:8e:5f:70:74:e8:4e:
         b7:be:af:2e:82:28:1c:61:11:d4:ba:81:d4:7e:df:b1:1a:ca:
         1f:8a:07:00:f5:a8:ff:4e:a3:a0:ab:fc:ab:29:82:6d:f2:ab:
         36:16:d7:89:4c:50:71:57:ce:08:e7:f9:01:e4:dc:2e:ff:89:
         a7:59:23:8f:59:8f:72:d3:b3:2e:b1:bd:5d:21:4a:a9:00:90:
         18:1e:48:29:b9:a4:b7:2f:52:d6:13:41:2c:c0:09:31:cb:5e:
         30:cb:a2:66:39:8c:10:13:32:d8:b5:99:90:e7:bd:2b:57:80:
         20:27:c9:0e:13:4f:7c:82:e3:1d:bf:d2:83:cb:33:3f:31:84:
         ce:f6:3b:57:ff:4d:02:45:7f:b0:3d:5b:2a:01:01:1f:a1:a2:
         ec:a5:39:65:86:5f:2c:19:7f:36:99:59:b0:9a:90:e4:e8:c4:
         97:8e:1e:68:52:68:ea:1d:2e:f7:87:de:6e:64:70:9d:0b:03:
         10:1a:03:cb:e2:fc:58:52:bc:84:11:43:8b:3b:95:4d:a2:b1:
         8e:83:4a:61:f6:a4:d1:e1:34:f4:0e:38:a7:5b:34:c5:75:85:
         cc:64:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----