Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          xP3Gt+IljavaHOHnTODwmesIkbnRQaZLYJCwSb32N0c=
Subject key identifier:   E4:55:80:44:B5:76:77:2F:BC:68:B6:BE:C9:49:FD:FD:B9:0B:9E:1A
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       01962DF39769B6911463DAA3413B7BBE1EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: QVRd9eVAKHT+wXziGY6v/JPYms7sGhCQyWFvJWqqyZk=)
                          2: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (hash: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:97:69:b6:91:14:63:da:a3:41:3b:7b:be:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=e4558044b576772fbc68b6bec949fdfdb90b9e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:d6:b2:39:e0:5b:28:06:73:34:97:84:18:
                    42:7e:f3:7b:d4:18:55:59:94:28:22:b6:e1:41:d5:
                    66:f1:72:00:0f:47:99:e2:22:6c:5b:e1:43:66:95:
                    2d:9d:ec:84:ec:3e:90:94:0a:1c:c2:a5:59:35:10:
                    25:29:e1:ff:18:12:e4:9b:40:f3:91:23:e8:cb:a2:
                    ec:d1:99:bf:e5:b1:89:86:8a:9e:6d:de:ce:d7:42:
                    4a:fc:68:36:25:1e:97:01:1a:62:2a:64:12:b5:67:
                    85:62:b9:d0:c4:69:30:45:3b:ba:ad:2e:3c:85:31:
                    07:ef:8b:53:53:da:27:85:cc:97:07:dd:2f:9e:85:
                    b3:d7:39:79:f6:85:de:f2:19:e9:37:93:4e:52:6b:
                    09:c8:0b:98:d1:96:32:8b:15:5e:f6:a0:d0:16:ac:
                    30:a6:87:01:22:96:f9:9e:19:ec:b9:5c:f6:b3:5c:
                    f1:d1:f5:28:54:fc:6f:3a:22:a8:6f:c3:63:74:a2:
                    cf:44:9c:a9:ad:4e:de:3c:53:ea:f1:08:b9:20:74:
                    54:82:9c:c4:48:f3:9a:5c:5a:32:25:4e:98:4a:44:
                    bc:f8:1e:69:f8:f9:3f:a5:9e:ee:d7:63:a9:75:90:
                    fc:8d:8a:74:ab:12:0d:e6:e7:1b:eb:23:6a:ac:36:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:80:44:B5:76:77:2F:BC:68:B6:BE:C9:49:FD:FD:B9:0B:9E:1A
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:a0:f2:14:61:43:e9:ad:5e:7b:25:44:51:29:fb:42:a0:
         d2:96:69:e6:0b:1e:b8:36:ff:3b:17:54:9e:58:65:28:99:9e:
         03:95:18:e0:28:c2:12:49:c2:d1:3a:a4:13:c0:f7:63:29:c9:
         21:3c:20:15:e6:e2:3c:4b:50:80:6d:cc:6f:ce:f4:2f:0b:69:
         9f:cf:0d:03:38:57:22:ff:cd:b5:2a:ad:61:f1:83:7e:59:b8:
         1e:a1:fa:7b:cc:68:56:b6:bb:34:48:9b:4c:fb:da:b8:42:fc:
         29:b4:d2:91:cb:e4:cd:d4:e1:6a:55:85:0c:1d:2d:01:ac:8e:
         e5:8a:14:09:c0:3a:a7:52:fe:f1:71:00:ae:6f:7f:42:48:d0:
         02:23:3d:31:73:e1:27:36:71:a7:b5:72:ed:15:b5:df:e0:4c:
         39:8b:b9:d1:c9:a6:b3:2f:81:ad:03:a5:eb:83:51:b1:96:50:
         5b:f8:98:aa:0b:a6:c5:15:a9:95:a6:bd:45:a0:ad:4d:7c:3f:
         46:63:c9:76:c1:61:c1:86:7a:65:c5:74:f2:5d:86:3a:c0:4d:
         d4:92:98:35:1c:5c:61:a3:0a:f7:62:fc:6d:94:5c:ba:66:75:
         db:e6:3d:51:9f:de:c1:29:83:03:bf:d2:e5:51:36:b4:60:03:
         f1:b8:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----