Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File:                     cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier:          CnE+ccyVInbAY4vikbhY1m38Kq+JzvMcNxrErVOjky8=
Subject key identifier:   C2:E7:FC:99:85:52:90:15:FB:43:4F:54:B0:87:38:02:9B:C4:1A:20
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer:       /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial:       01962F06F10B4F0128F93F037D159C8C74E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: QMYkJgzQFyN6vekTMElumpCF5oZtNjAO4PSRbp7hecs=)
                          2: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (hash: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f1:0b:4f:01:28:f9:3f:03:7d:15:9c:8c:74:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=c2e7fc9985529015fb434f54b08738029bc41a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:30:68:b4:56:d0:6d:b1:82:80:48:4c:60:
                    a4:fb:f5:cc:1a:fa:78:30:81:f6:82:09:62:9a:34:
                    52:20:f0:25:02:2e:60:52:9b:54:40:9e:af:8d:25:
                    85:f5:26:35:6d:36:c4:0b:50:74:de:a6:5a:b0:0d:
                    11:d6:83:e1:bf:75:7a:27:69:3a:47:35:e4:f7:27:
                    e0:c4:be:13:bc:c4:a9:11:ef:b0:0b:1e:b3:26:3a:
                    b0:82:ab:8e:b5:d7:7b:50:b2:a8:11:37:fb:69:5a:
                    ab:a8:23:f3:33:30:62:a0:2b:8e:8b:ee:a8:57:38:
                    bf:de:65:be:ef:d8:1d:65:0a:4e:ee:38:85:12:7e:
                    06:1c:c4:8c:21:24:30:2d:c8:56:89:7a:cd:ab:a2:
                    a2:2e:b2:06:a9:97:c3:15:77:b6:68:d1:99:ff:b1:
                    02:1f:27:1c:d9:04:5b:66:af:b3:d8:22:54:7b:c6:
                    28:8e:25:41:db:f8:d4:76:69:09:e2:b5:3a:f9:ec:
                    a9:28:73:3b:b5:a6:72:82:dc:94:19:c9:91:3a:6a:
                    ea:d9:93:7f:e3:1a:e2:01:86:98:a9:ae:98:ab:58:
                    c1:a9:39:46:3c:1a:8e:d5:65:3c:ad:bf:77:67:87:
                    b5:bb:4a:bf:0e:fc:55:35:4e:d0:f2:57:37:4b:29:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:FC:99:85:52:90:15:FB:43:4F:54:B0:87:38:02:9B:C4:1A:20
            X509v3 Authority Key Identifier:
                keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:b9:7c:82:43:bc:c1:69:83:82:7b:b6:11:b4:f7:7a:81:
         a6:95:b7:6c:16:42:e1:ce:34:04:6f:92:61:d2:f6:6e:74:80:
         cd:ab:1b:f5:a3:25:72:54:87:4f:3d:c5:cf:02:22:cc:99:43:
         c8:be:15:65:f5:12:2a:ed:ba:86:79:2e:d4:14:50:80:cd:c1:
         dc:66:97:d8:83:f4:33:51:ce:63:42:5b:98:99:44:3c:bd:24:
         94:a4:84:3c:29:2c:07:3f:66:09:c6:61:e3:c8:37:e1:90:7c:
         24:1e:f0:39:77:98:f9:ef:65:45:90:79:83:e2:7b:74:57:77:
         3a:1a:20:31:0c:dd:d3:97:4f:73:fe:63:1f:91:49:7d:3b:d7:
         2f:bb:e7:32:82:36:10:90:d8:06:b9:ec:87:98:1d:08:77:97:
         f8:66:d0:25:fa:c7:7e:fc:1c:5e:40:4b:aa:11:e3:c6:29:5c:
         ac:74:ef:9e:24:1d:fc:90:29:40:7b:61:dd:a0:45:82:3b:62:
         41:74:95:df:0a:90:b2:e3:3f:0f:c1:8e:89:4c:75:71:9b:5b:
         d7:78:c3:64:b2:39:67:e0:d6:06:79:16:2a:3a:05:44:26:0f:
         73:3c:6c:05:4d:10:bb:33:d0:84:81:b5:9f:f9:01:30:b5:e5:
         fb:3c:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----