Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File:                     V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier:          H/H9+qln54mTTs5lvo0DdovJS9aby4A23q/A7OVBU9A=
Subject key identifier:   EC:C2:C8:31:14:C0:4F:F0:F8:8D:FC:14:3E:B0:9D:53:B5:DE:02:14
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer:       /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial:       01962FAB0AE795A662E83EE8699F5413E28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number:          01E1
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: 51wknPBGdSjk5daHsyewLuFGn3arUB7UVt6pNAsKvTU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0a:e7:95:a6:62:e8:3e:e8:69:9f:54:13:e2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=ecc2c83114c04ff0f88dfc143eb09d53b5de0214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:fa:ff:45:85:86:a1:af:ed:eb:24:0c:52:
                    ac:42:5a:3f:e6:76:f8:fd:65:c5:24:5d:67:64:cd:
                    9e:4d:68:37:87:fd:51:51:35:7e:d6:1a:e3:95:62:
                    c6:92:59:4c:ab:f1:24:2a:a8:3a:4b:c5:a1:74:b3:
                    3d:ec:24:f2:a0:9b:ea:36:a4:bd:ed:f9:01:89:7b:
                    02:0d:d1:2e:f0:26:c9:58:1b:61:7f:c0:df:b0:74:
                    ec:a3:19:07:75:34:6d:11:1b:ae:9c:9d:ec:a7:f6:
                    2a:a0:eb:87:04:e7:97:aa:d6:53:b8:55:2f:54:86:
                    6e:44:19:66:a4:c9:24:14:11:9d:47:0d:62:57:84:
                    a3:43:2d:35:45:0f:80:64:cf:5c:66:a4:72:9e:4f:
                    a7:5c:48:38:97:5d:6a:8a:54:a3:66:6c:40:5e:4f:
                    4d:c2:5a:69:8a:86:db:48:22:91:77:ee:c9:ca:89:
                    ed:32:f6:b2:89:50:4b:ee:2c:9d:c8:83:0a:ab:9c:
                    a4:93:80:2c:10:8f:39:da:ef:cf:bb:03:c5:d3:e8:
                    c6:35:2d:6e:c4:86:58:0c:f5:2b:e8:d7:ff:72:16:
                    83:eb:4c:08:b6:6c:76:25:28:1e:42:4f:b4:f0:01:
                    26:c7:59:3d:1e:7c:2e:b4:92:23:96:88:46:da:ca:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:C8:31:14:C0:4F:F0:F8:8D:FC:14:3E:B0:9D:53:B5:DE:02:14
            X509v3 Authority Key Identifier:
                keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e3:55:55:58:94:4a:95:5f:26:f1:98:61:f6:4c:ea:d2:65:
         6d:92:2c:b4:61:f2:1a:42:39:59:93:11:89:94:eb:83:0e:95:
         f8:33:f0:04:58:f3:29:68:46:6f:a5:5e:a6:d0:bb:e6:ba:0e:
         d1:bb:16:1d:0f:81:67:bf:e2:94:c9:fa:9b:3e:a5:14:c3:a9:
         8d:0d:c7:40:bb:35:1c:34:12:23:47:b4:ac:aa:af:d3:34:9d:
         44:d5:ff:c4:f9:70:4e:41:aa:34:e3:14:ad:ac:35:f7:13:30:
         29:62:90:bb:03:31:77:4a:e8:47:b7:b2:b5:fa:b3:ac:ac:fb:
         b5:c9:1e:74:4f:f4:7f:74:c0:ab:3a:50:c5:76:55:d2:71:8d:
         1e:8a:a2:da:a1:83:73:5d:2d:8b:84:de:84:b5:e3:17:01:72:
         3a:8f:5f:7f:0b:b1:01:61:a3:6b:a8:98:a4:7c:8c:ee:6d:26:
         05:f3:26:4c:9d:ca:a2:20:73:ac:fb:4f:70:1a:0d:a4:65:73:
         31:d0:7d:4c:57:86:ab:4e:a0:56:32:59:dd:89:7f:7b:39:93:
         13:67:a5:18:81:07:cf:d4:d0:a5:8c:8d:c8:80:d9:7a:18:53:
         19:11:ff:54:2f:c4:96:60:7e:45:78:28:43:3b:66:c3:b4:e3:
         9d:3a:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----