Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File:                     9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier:          FKV/1UgLyV//hfzOXmThPSlDy79acvsPJoKgZqyeD0U=
Subject key identifier:   AE:E7:AA:B3:A1:17:88:65:BB:5C:95:19:58:1C:4F:FA:11:71:20:4F
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer:       /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial:       01962E2AE8B4B4499412729135589E0F4E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: MIANzylxrtugZER815He6Z8R705N0gOHOZlKXJxZe2A=)
                          2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:b4:b4:49:94:12:72:91:35:58:9e:0f:4e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=aee7aab3a1178865bb5c9519581c4ffa1171204f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:51:e9:67:90:f7:e0:c9:10:bd:3f:2c:3e:
                    6e:72:e5:5a:e9:46:6f:2a:bb:ce:20:7e:dc:d1:d5:
                    52:a9:6f:09:11:43:f7:ee:8a:b4:39:1d:de:24:d0:
                    82:4c:4f:56:1f:c8:78:b6:01:3d:73:20:7d:94:17:
                    cf:75:c5:2a:e5:2e:73:42:59:cc:b2:82:5c:94:d4:
                    e5:0d:2f:1e:c8:59:77:09:c5:2e:bf:62:15:87:bb:
                    bc:46:c4:c4:f9:09:40:26:70:02:ff:5a:0f:00:23:
                    56:6c:50:7f:13:3c:62:ae:97:ac:52:01:81:0d:30:
                    47:20:53:82:18:5e:f8:99:76:54:1a:6e:7c:8e:3a:
                    c2:bc:89:ef:ce:5f:ee:24:40:57:cd:4d:74:65:42:
                    5b:ad:27:f1:f0:ec:24:3a:da:59:19:17:66:d3:7d:
                    f9:bc:c9:71:ef:4c:0f:ce:ca:fa:27:18:4b:c9:b5:
                    75:e1:b8:06:6d:f0:f8:81:67:eb:02:a8:9f:8f:3f:
                    4e:5e:f1:1d:ff:7d:b1:d3:28:1a:54:8d:ea:95:00:
                    b7:29:5b:c9:d2:c6:c3:06:c1:ee:20:dc:ed:6d:c1:
                    4a:8d:61:6d:15:95:d5:59:18:cb:8f:d2:43:9f:3f:
                    e3:3d:b4:f4:60:2a:07:8a:76:2a:23:ed:eb:87:f0:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E7:AA:B3:A1:17:88:65:BB:5C:95:19:58:1C:4F:FA:11:71:20:4F
            X509v3 Authority Key Identifier:
                keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:fa:2e:61:fd:09:04:f5:ad:78:35:3c:17:30:c3:c0:1c:
         b9:94:25:87:55:0f:4f:35:0b:c5:21:1f:08:67:26:3a:a0:01:
         69:56:6f:9a:0b:2b:fb:87:27:81:8f:3e:f7:f6:d1:ef:bf:d7:
         05:82:be:3a:58:69:fd:35:fb:99:01:31:e6:d1:64:84:27:7a:
         22:02:bc:41:ad:bb:a2:68:96:73:42:a4:8a:18:f9:dd:7d:ee:
         c2:78:a6:91:29:70:2e:7e:b0:f3:87:a0:8d:f3:ad:2f:aa:73:
         2a:b4:22:71:fc:67:ee:9d:e9:f2:11:29:8c:20:6a:55:50:01:
         49:22:fa:27:94:a8:82:86:ac:30:66:ed:bf:9d:da:84:8b:21:
         a7:16:7f:12:97:26:c5:03:84:4b:18:61:ee:7e:69:b6:b7:4b:
         11:4a:a5:e2:1f:57:0a:c4:0b:8a:f3:cc:7d:2e:94:4d:be:13:
         73:af:78:f8:94:10:08:b9:0d:56:14:61:ae:5f:7a:93:f4:3c:
         af:81:a3:56:eb:e1:c2:9e:b5:33:c0:14:4d:a5:1e:75:20:1e:
         32:35:19:6b:d7:d8:ba:14:8e:9a:11:e2:0a:6b:a1:a2:bc:6a:
         ae:0f:7e:5e:e6:bd:c7:b4:00:1f:4b:1b:18:a5:c7:ae:a0:f3:
         47:57:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----