Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File:                     Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier:          8zOQGtlQOfOL7R7ZJ0BY7XXFYPeZjOA734+RO68RdMs=
Subject key identifier:   01:41:36:00:E4:F2:98:1F:BF:42:AF:49:EC:DC:B9:E6:D7:20:52:A5
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer:       /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial:       01962F745045FEA749F14981F6A11D04EBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: ojgdC1u+YdOQ4VyPneRRoSJGzNKMfdys2EzIc57OJpU=)
                          2: VDDxUy1rUQDxJYT3ATBjI69SbdQ.roa (hash: oF1hkO2cydZ9A84V2XohR++dZN8uh+qMwIFTNO+4W4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:45:fe:a7:49:f1:49:81:f6:a1:1d:04:eb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=01413600e4f2981fbf42af49ecdcb9e6d72052a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:69:55:ae:61:56:47:d3:b3:a8:1f:9e:ff:
                    a9:e3:bc:a8:54:1c:91:72:fa:42:e1:cb:33:8d:42:
                    d0:b4:1a:1e:ff:15:3a:e0:37:04:e9:47:26:d8:a4:
                    9b:19:0c:7f:6b:f2:8b:26:2c:98:12:40:bf:82:4a:
                    40:84:a1:89:e0:f5:dc:29:ea:62:78:d0:06:6d:2d:
                    8b:d8:52:05:00:f9:2a:ff:0f:0d:3d:88:49:fb:8f:
                    eb:10:bb:ad:91:eb:a7:bf:71:64:d4:51:52:07:bd:
                    01:48:98:1d:61:dc:b0:8a:20:0e:55:5f:8c:28:05:
                    e3:8d:85:39:90:4e:23:75:ff:70:e2:a6:77:bc:67:
                    e5:b4:8d:49:b1:f4:0e:97:0f:2f:b7:3a:ad:e5:25:
                    c7:04:d6:e1:33:7d:0d:e1:a6:a8:e3:e0:7e:c2:d4:
                    f4:46:3d:80:3f:83:ae:83:b9:73:6d:42:c5:3c:26:
                    5e:04:d7:c6:03:8a:16:70:d1:9d:db:44:08:31:52:
                    bc:9d:2b:49:25:af:64:65:3d:e7:e2:3f:8a:f8:0b:
                    40:13:8c:b8:91:53:8b:18:bb:0c:c8:62:56:62:8b:
                    b7:6d:5b:2a:f4:0f:92:58:74:d5:e9:1f:3f:eb:c1:
                    7a:5c:ab:30:5b:1f:0b:27:79:08:f9:b2:9e:e1:03:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:36:00:E4:F2:98:1F:BF:42:AF:49:EC:DC:B9:E6:D7:20:52:A5
            X509v3 Authority Key Identifier:
                keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:24:c9:48:fc:1d:0c:81:9c:8d:c8:27:bf:a1:5f:f1:d0:c4:
         87:ce:30:55:5e:8d:ce:ec:69:2e:2e:2c:63:91:a7:c3:29:24:
         88:27:53:c0:21:0f:d1:ee:06:50:1c:4b:f4:4e:a8:7c:d8:bc:
         e3:dc:47:0c:88:83:2a:d8:97:c7:d5:f0:5f:02:dc:87:d9:81:
         14:50:52:12:ca:61:8d:c5:55:23:52:c2:51:78:4d:f9:e5:f5:
         d2:1e:bb:c7:8d:7a:37:79:53:83:65:5d:4f:7b:61:70:9b:13:
         6e:41:17:ef:59:14:c7:e7:dd:ef:05:e1:46:0d:28:16:e7:25:
         92:21:dd:41:72:f7:9c:e4:6b:f4:1d:c4:8d:e0:90:8a:59:f3:
         4f:93:ec:e6:48:4c:a0:2a:4a:bc:ba:eb:ae:47:96:74:50:67:
         31:77:fe:4f:95:c0:b7:26:7f:de:97:ab:d2:31:6e:60:3d:a3:
         d6:03:e7:c7:ef:bd:92:e6:67:d1:2e:9c:61:18:18:0c:23:7e:
         98:64:8e:0f:6a:82:99:99:07:f8:70:d5:3e:da:85:01:5c:7e:
         0e:96:5c:d4:63:cc:e4:4c:c9:73:60:1d:ae:9a:9d:c2:51:8c:
         82:b2:b9:d6:f8:4b:45:40:a1:d0:5d:38:e7:52:ce:fe:f5:f2:
         20:f2:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----