Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File:                     CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier:          FJ2tOe5OX5l4uTooe4HlvIe4ZOYkK8OeHRGkm3vcliQ=
Subject key identifier:   45:47:2E:B7:73:A3:BC:E9:40:25:6B:CF:AC:3B:50:CF:DD:DA:1F:5E
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer:       /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial:       01962ECF9D7D5CC266034D0EDA6CC57E76E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: 3CkFd6uMau3+higUQUTB8MJ4dp3aJeuHNCJD05zg2ME=)
                          2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9d:7d:5c:c2:66:03:4d:0e:da:6c:c5:7e:76:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=45472eb773a3bce940256bcfac3b50cfddda1f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:a4:e5:81:c3:aa:90:b3:a8:1d:dd:fe:aa:
                    3c:c2:a2:f5:20:d8:82:dd:1d:c2:75:4a:3f:3c:ee:
                    c0:28:6f:11:37:94:a7:29:3f:aa:75:c7:de:2e:8c:
                    67:02:48:6f:88:29:0b:6b:60:2a:2c:db:c3:93:37:
                    9f:24:83:4c:d1:d7:e5:07:03:c6:41:df:b7:a2:14:
                    37:eb:6a:26:29:2a:ff:3f:54:ea:53:e1:23:0a:5b:
                    4a:29:d6:de:ae:67:4d:cd:a1:0f:d9:99:33:82:d3:
                    c6:39:e6:49:c8:4d:2a:63:d5:76:fc:b0:86:93:4b:
                    62:51:5c:0f:4d:76:f6:0c:e9:b7:1c:66:2f:28:a4:
                    c8:3a:5a:f9:61:1e:a9:be:1d:0e:37:46:87:30:10:
                    66:87:8c:c4:79:22:58:4d:ea:99:ef:04:07:a6:c9:
                    39:ed:4d:4c:71:aa:83:30:ec:a7:06:3a:53:84:00:
                    29:9e:7f:78:b4:10:a5:b4:e0:48:6a:92:9d:18:bd:
                    38:9b:eb:55:eb:91:36:26:89:68:4f:e5:0b:f4:e9:
                    e6:e9:7d:91:56:a5:53:5f:b1:f6:a6:db:11:63:4e:
                    50:e2:fa:06:c8:d7:2e:93:58:28:b9:3f:d1:7b:a4:
                    8e:f5:4b:91:eb:1e:66:7a:d7:16:30:3b:67:1c:8d:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:2E:B7:73:A3:BC:E9:40:25:6B:CF:AC:3B:50:CF:DD:DA:1F:5E
            X509v3 Authority Key Identifier:
                keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:ab:4b:5f:24:b1:a1:51:c1:69:12:1e:04:f3:a8:fa:ae:
         2b:3e:00:03:3c:f6:fc:1d:dd:25:82:8b:8f:40:e4:9d:48:89:
         5b:31:85:b2:d6:c2:71:43:de:56:15:95:04:8d:0d:83:1c:06:
         a8:a7:2c:04:6c:83:c1:c8:64:6c:65:5d:d0:50:89:71:09:93:
         76:b8:27:0a:11:1b:5e:f6:bc:d0:a0:f2:d9:cd:95:7d:14:7b:
         44:fb:a9:85:50:df:82:9f:12:91:85:b4:a9:1e:3f:45:e4:e4:
         31:7a:5b:19:00:86:7e:21:bb:9b:c8:8c:8d:e1:ed:7a:8e:2b:
         b8:30:08:d3:5e:12:91:97:2b:21:73:eb:d8:76:48:bf:79:e9:
         1d:25:76:66:9a:f6:a8:24:18:bb:01:a9:66:11:f4:f0:1a:75:
         b7:ea:4a:80:ec:59:44:2c:fa:57:d3:1a:9d:c1:d6:cf:d6:69:
         d5:ed:29:da:05:96:96:c5:79:9e:11:8a:40:80:b5:a3:39:0b:
         fe:a0:94:08:e8:c4:3f:2b:fd:98:03:55:86:b7:a5:ed:80:8c:
         d4:43:0c:16:9b:86:59:29:2a:6d:83:58:2e:1f:ca:b9:d3:0d:
         4e:73:20:9c:3e:96:80:1e:b6:98:d6:a2:30:4b:75:69:f8:2e:
         87:f0:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----