Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File:                     A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier:          dhTxv5i23Aak3ZG35CMrtHY83ic73Qj7OHhjn8flvLs=
Subject key identifier:   32:73:5D:BC:74:86:97:F7:D2:B9:56:04:46:80:94:43:61:E7:E3:91
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer:       /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial:       01962E999A2E320FA79E53EC36CEB4753EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: 7P1kMotZSoWRRXM0dgOapftggTnbcnyvN2vEFgL7UEY=)
                          2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
                          3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:2e:32:0f:a7:9e:53:ec:36:ce:b4:75:3e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=32735dbc748697f7d2b956044680944361e7e391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:38:4a:4c:67:cf:87:51:f7:61:9c:66:f9:
                    18:57:e0:33:d6:a5:dd:c6:c3:4a:f2:e4:ef:da:35:
                    79:57:e1:c3:ec:1b:a4:4d:13:eb:90:09:0f:d8:78:
                    7e:a6:a6:3b:c9:c3:3f:47:00:04:75:f2:66:da:3f:
                    e9:88:07:75:ab:e4:d7:33:41:b1:44:83:c7:3d:4e:
                    37:c9:b3:2c:b0:4d:4a:8d:ac:40:58:b4:7e:29:d5:
                    04:0e:7b:e7:b5:d0:31:f2:71:58:30:fa:3b:38:71:
                    43:00:cd:cf:db:e9:2d:ef:d1:35:8e:0a:5f:1a:9f:
                    2b:ec:93:7c:27:a3:67:73:d0:79:0b:93:38:3f:9f:
                    de:96:92:8e:50:37:b5:af:b7:a2:56:9f:94:c8:74:
                    16:3b:8d:50:a5:8b:f9:ec:d5:47:45:f5:2e:ee:e8:
                    c9:fa:63:18:89:46:5b:4d:07:e2:37:79:8f:8d:1c:
                    80:1a:35:e4:db:64:69:b7:e1:fa:89:17:bf:e7:ca:
                    b7:e6:58:eb:e2:5f:b7:c8:d7:7d:e0:da:7a:d0:28:
                    6d:c7:29:a2:b0:75:b8:87:3a:48:52:81:cf:d7:73:
                    60:b9:d1:2f:73:5b:91:7b:27:1c:86:8d:82:f4:83:
                    0d:ab:2b:1d:81:80:68:3e:b8:af:a1:1b:cc:24:a7:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:5D:BC:74:86:97:F7:D2:B9:56:04:46:80:94:43:61:E7:E3:91
            X509v3 Authority Key Identifier:
                keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2e:92:31:61:c5:a9:67:a8:73:c8:f0:aa:14:ae:9a:21:7a:
         b2:ad:9f:3e:ca:b0:a4:f0:d4:99:2c:05:27:9f:a6:fc:0b:98:
         eb:87:c9:46:a8:87:f8:71:b5:ae:dc:f5:a5:09:1a:0f:af:f4:
         a5:b8:9d:fa:92:27:c6:6c:05:7f:d9:9e:05:32:b3:b5:be:0c:
         58:b3:ab:8a:71:2f:5b:06:4e:c4:5d:96:f2:39:98:1d:b0:1f:
         51:4c:c9:68:a9:df:f6:b1:ee:91:c2:5b:4c:db:1f:88:d7:d6:
         53:ba:91:d6:cf:97:66:79:68:36:b7:1a:4a:1c:04:3f:50:85:
         7d:b5:8b:21:b2:98:e7:86:be:9e:44:6b:08:14:7e:cb:e1:7a:
         a2:a2:2d:fc:53:38:12:47:c3:f6:2e:3e:23:21:04:19:1a:63:
         fb:d1:fb:8a:88:ae:80:ac:0d:27:ae:99:05:93:c0:fc:03:d4:
         cc:22:ae:64:e6:1e:a5:91:b8:4c:a4:35:dd:d2:06:ba:be:07:
         80:5d:f4:c2:37:f6:60:8a:38:b8:d0:14:22:e3:92:dd:2a:ae:
         d7:84:c9:39:42:e8:a6:36:39:23:0b:dd:9d:01:5c:85:ec:0a:
         5f:2d:31:e3:77:5e:36:06:9d:6a:b2:ef:11:25:f7:30:16:a0:
         a2:04:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----