Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File:                     Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier:          Y2KhJUi5LmGs4ZIIw5IdWC1mytG7CPnLk5m622G20Z0=
Subject key identifier:   DC:65:61:FF:22:B5:B5:ED:DB:BB:CF:E1:C6:1B:38:F2:64:40:8D:BA
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer:       /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial:       01962ECFCA935EA409212A511A3AA8C4C2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: YiUUj9BVyQtIq3yLBTqNTq40tyXA6kJGTMDSbJJCxBU=)
                          2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:93:5e:a4:09:21:2a:51:1a:3a:a8:c4:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=dc6561ff22b5b5eddbbbcfe1c61b38f264408dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:5f:0d:b7:92:6b:d8:92:58:be:b8:16:a2:
                    17:93:8c:65:f0:f6:6f:91:04:a5:5c:33:39:30:80:
                    8f:a3:b4:d6:62:a3:9e:16:f1:e3:e6:1d:1d:b9:79:
                    1a:99:9d:f7:f2:c1:25:68:87:b9:34:d5:7a:33:6d:
                    d3:64:b4:9e:1c:a5:a5:dd:ec:4c:9a:5c:cd:2f:75:
                    80:eb:40:3d:33:ed:73:0a:80:df:85:77:38:a5:6d:
                    7a:3b:5b:38:00:f5:10:6d:c1:6a:c4:5a:63:5f:06:
                    72:f2:ed:bd:0b:ba:cd:a9:01:9f:e2:af:1b:e5:82:
                    d3:6a:96:be:8e:0b:bb:34:fc:bf:17:97:33:a8:09:
                    01:48:a1:63:86:b6:af:93:51:27:51:10:a2:9c:09:
                    7c:34:5f:63:1e:69:61:3e:37:22:54:89:9a:39:8f:
                    3f:69:c3:53:79:1d:0a:b7:b4:69:8a:1d:fa:83:da:
                    15:8b:8b:e5:f8:bf:78:d3:57:cb:45:e9:95:d1:c8:
                    5c:48:ca:7c:89:6d:58:46:c4:7e:23:54:db:ef:53:
                    aa:b0:9f:b1:93:d0:0f:57:6c:67:e8:25:32:e9:ff:
                    c3:32:4d:10:11:b2:d5:a1:a0:87:33:f7:a0:81:c0:
                    2b:6a:a0:52:11:89:e4:9a:c5:37:86:09:72:68:4e:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:61:FF:22:B5:B5:ED:DB:BB:CF:E1:C6:1B:38:F2:64:40:8D:BA
            X509v3 Authority Key Identifier:
                keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:24:ac:5c:f3:0a:ea:bb:84:76:f2:54:67:20:38:30:8b:1c:
         a6:be:90:45:22:04:51:d2:de:a2:75:ab:64:d7:69:99:8f:08:
         18:02:31:4f:ad:e3:5a:44:8b:cf:ba:10:e0:8e:e5:00:eb:d0:
         6c:40:b6:60:1b:63:ca:e2:9a:ed:60:43:7c:c6:df:97:f3:4d:
         35:ae:f0:0f:76:31:a6:d9:e6:6b:59:2b:b9:aa:80:58:de:60:
         57:1e:d6:38:57:18:47:29:2b:8b:49:ad:4b:56:d2:82:c2:e6:
         08:5d:42:ff:bc:89:83:2c:e3:d3:97:ef:3a:84:33:dd:04:3a:
         fb:25:63:fd:7c:87:85:ac:25:58:c9:40:ab:83:cf:fc:3a:c0:
         cb:84:c3:d3:2a:b3:d2:b3:08:e1:3b:dd:3e:31:b4:22:bb:95:
         46:b5:d4:04:b8:82:00:be:3d:c9:b3:c4:7e:af:96:5b:d4:8a:
         f6:93:db:b7:4a:e8:9a:37:2b:09:2a:fb:f8:2e:0e:89:b2:32:
         ba:a3:bc:db:e1:72:57:cf:e5:ee:67:d0:57:59:f1:89:7d:15:
         07:dc:6b:47:02:72:4d:c3:f4:03:e5:76:a7:50:b7:d3:70:cd:
         06:78:ce:8f:82:fa:2a:50:5a:bf:d1:09:e2:f4:77:bc:dd:20:
         76:e3:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----