Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File:                     cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier:          JHTdn74J/ZptQ1hk6A9EimPUnf4HTI4vFoufdYbGh1w=
Subject key identifier:   E8:98:CB:A1:93:0D:AE:F8:A7:E8:6B:B0:6A:16:9F:B6:3C:25:D0:AE
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer:       /CN=709d69957d333432accac810231e289388e302e2
Certificate serial:       01962E618C057DCCECF257C8CC74D7EA15AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
                          2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: IcF0JVfU9hmYzD11mhUOIJiXUjH/owCJLi7HK9+fAXg=)
                          3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8c:05:7d:cc:ec:f2:57:c8:cc:74:d7:ea:15:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709d69957d333432accac810231e289388e302e2
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=e898cba1930daef8a7e86bb06a169fb63c25d0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:88:3f:95:bf:f4:3b:9a:2a:b0:78:73:2d:
                    c4:6d:9e:b9:6e:08:9a:97:ca:62:86:17:4e:f5:ea:
                    11:6c:e1:08:66:7e:8d:da:b9:ee:dc:53:33:ec:9d:
                    32:fd:41:be:84:1a:82:10:b6:be:70:68:f1:f6:84:
                    f1:01:0f:9c:c7:35:da:ec:75:d6:82:9d:83:93:7d:
                    6c:63:09:de:7d:25:54:2d:f8:b6:2c:3d:36:4d:51:
                    88:72:6c:2d:e8:6a:0f:d5:90:e5:60:66:8f:d0:e2:
                    10:a1:37:86:ca:02:b1:1a:66:f5:7e:cd:38:9b:f8:
                    87:a6:86:8e:8d:9c:04:c3:97:de:07:0c:83:38:f7:
                    f4:89:cd:32:48:4d:00:27:df:b7:cc:62:64:92:9d:
                    f4:35:44:e0:54:c2:d7:20:e3:6b:f6:72:51:0c:d5:
                    72:51:3c:35:5e:fd:98:a6:b2:e2:92:c1:ee:1e:a0:
                    89:57:de:81:b9:36:e6:06:5b:fb:7c:a6:2a:f2:f5:
                    ce:b6:c6:c1:b2:32:25:b6:01:26:92:68:04:a5:88:
                    d9:cf:50:a2:cc:a5:a1:32:cb:74:0d:63:1c:92:67:
                    23:2d:bd:c6:57:2a:97:cc:6b:ed:bd:96:6b:46:96:
                    98:fa:6d:82:68:c7:ab:70:28:77:85:06:8e:7a:b8:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:CB:A1:93:0D:AE:F8:A7:E8:6B:B0:6A:16:9F:B6:3C:25:D0:AE
            X509v3 Authority Key Identifier:
                keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:44:78:43:cf:a8:e7:6c:ca:ea:d7:fd:7c:03:39:38:48:ed:
         8c:c4:73:e9:96:43:46:4c:6b:e7:76:7b:7b:32:ae:1c:c6:ee:
         08:38:18:1c:4f:42:0f:a9:aa:e1:ca:66:5f:14:e6:83:2b:cd:
         e3:22:96:24:4b:85:6d:41:d6:d7:97:3a:30:63:25:95:d7:e6:
         70:cf:4e:d4:2d:60:e2:74:58:e6:12:78:c1:65:42:9d:59:00:
         e7:96:66:8a:8c:91:64:24:66:23:f2:05:b2:fd:5a:d6:02:21:
         58:c4:c7:59:4e:da:09:b6:11:85:19:7d:e6:28:18:9e:65:60:
         37:26:f3:8b:c3:16:b3:01:17:5c:47:99:7e:a1:e8:1f:37:54:
         60:8e:cb:3a:6b:f9:92:1e:ae:74:85:e8:4a:25:6a:90:bd:6c:
         9b:86:0d:51:d8:8a:71:e3:e3:04:0c:76:61:ab:87:d2:e1:70:
         8a:69:07:5b:df:a4:20:01:86:93:8f:1d:43:e4:66:a3:bc:d0:
         e7:ba:42:e7:e0:67:bd:fc:82:9f:01:04:0b:8c:7d:08:54:4c:
         94:cd:f8:d0:8a:b3:a0:9f:6c:32:9a:c0:c0:b7:8c:cd:4b:73:
         40:07:9a:c4:e9:7c:bb:4f:18:53:69:10:37:44:dd:0b:74:17:
         ca:fe:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----