Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File:                     mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier:          KMxRLDhlxmw+2LVOFrCoZBKj9zgSFA3HcLeJVmq1ADY=
Subject key identifier:   F3:E0:A9:C8:3E:88:33:9B:E4:DD:C8:23:92:F6:20:BF:1C:31:CB:99
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer:       /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial:       01962F7452664BDD449D206020B4721464B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: 4+gzXiHhMBLZTJtePCD0LiMuVhwbALPZOQBJkkg3eJw=)
                          2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:66:4b:dd:44:9d:20:60:20:b4:72:14:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=f3e0a9c83e88339be4ddc82392f620bf1c31cb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:99:fc:f2:80:9e:5e:67:ef:8d:2b:6d:bb:
                    11:d0:ea:f6:48:23:49:ae:dc:c2:1a:55:24:66:39:
                    b5:e4:4d:5b:a2:2b:65:6b:97:57:7c:01:71:18:db:
                    eb:e4:a5:1c:60:71:41:7b:6b:50:de:f8:3b:ec:5a:
                    76:ec:c7:87:7d:07:56:9e:6f:72:55:1b:62:51:d1:
                    48:8d:11:15:a9:ad:54:d9:b8:77:c3:05:8f:56:cd:
                    42:44:89:09:94:5f:ef:1f:85:a7:f1:f7:41:1a:3a:
                    a4:ac:55:19:8e:8d:46:0b:5f:ea:53:ed:7a:97:5d:
                    60:25:18:31:ba:6a:c8:97:04:96:4e:28:9d:25:a9:
                    96:cf:0c:bb:27:8e:e4:ab:f4:ed:30:0f:61:70:9a:
                    2a:a8:bc:0b:97:7f:db:c8:3c:8f:cf:50:d2:0f:bf:
                    59:30:ef:0d:e6:41:68:1f:57:51:b7:79:61:ae:32:
                    b1:e9:68:67:39:c1:b1:91:e7:2b:6a:f1:84:e9:53:
                    55:9f:e0:8d:17:70:b0:40:e1:50:e4:ff:a3:ed:0e:
                    cd:0b:03:50:6f:90:55:1b:b3:fb:b0:94:ab:3c:b1:
                    6c:81:04:2e:06:5b:fe:d4:5c:04:35:c3:a9:72:4b:
                    2d:58:72:c3:df:66:f8:1f:3b:2a:20:a9:c6:c5:21:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E0:A9:C8:3E:88:33:9B:E4:DD:C8:23:92:F6:20:BF:1C:31:CB:99
            X509v3 Authority Key Identifier:
                keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:31:88:39:7e:3d:7e:05:38:a9:98:00:d4:5d:18:f6:e7:7a:
         a1:9b:8a:6e:b5:e4:b3:c7:15:0b:48:62:79:a6:1b:5c:e4:27:
         bf:40:e4:57:6f:fe:5d:60:ee:14:19:c9:ca:be:97:6d:2e:bf:
         dd:26:38:0e:97:c8:53:93:51:a7:5b:2d:1a:c9:82:70:29:8f:
         6b:77:f0:83:84:de:85:41:a0:ea:c3:29:d4:ac:4b:e1:a4:6e:
         f8:2c:37:98:66:d8:d8:7d:fd:2a:14:dd:6a:f8:3f:df:cc:6b:
         05:8d:b6:33:49:6e:d9:a4:49:85:4e:e9:66:87:4d:d5:b0:3e:
         44:89:3f:03:7f:45:b4:8b:20:bb:15:28:b1:d8:63:2f:8c:15:
         73:c8:d5:e2:7b:b6:1f:0d:01:40:68:a2:f8:c3:15:bb:db:1e:
         76:26:93:3c:ae:4c:77:93:c3:a4:71:7f:0d:74:f9:5b:a0:99:
         49:66:5f:79:2f:cb:75:bc:3b:69:c3:1b:01:03:43:86:ba:84:
         0e:08:a5:34:3b:66:49:b3:c1:c2:3f:51:94:fb:53:43:0d:a1:
         82:59:9f:fc:af:3a:72:c5:f9:41:fc:ec:8a:7a:c3:ed:56:9a:
         8d:0d:f7:e4:f2:ae:68:77:d3:28:a8:66:56:78:a8:68:12:a3:
         18:90:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----