Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File:                     9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier:          Z1vC4t/LdJGP1EWJNqbvNTqFn7wCBEJVPtMFFwu1OsI=
Subject key identifier:   E3:03:36:64:B2:40:0E:4D:F5:09:6D:36:3D:E3:86:86:FE:03:18:3A
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer:       /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial:       01962E2B536D0D819C75C64150BF3E81CA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 08:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:53 +0000
Files and hashes:         1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: gTREHGrAQTjfjyo2tt483pWHzXi4/0BpY8nmbEVsWxE=)
                          2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
                          3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:53:6d:0d:81:9c:75:c6:41:50:bf:3e:81:ca:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
        Validity
            Not Before: Apr 13 08:01:53 2025 GMT
            Not After : Apr 14 08:01:53 2025 GMT
        Subject: CN=e3033664b2400e4df5096d363de38686fe03183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:46:c6:8d:43:86:56:13:a6:7f:5f:c8:19:
                    cb:22:a7:4c:f4:e2:a1:d2:17:cc:d8:b5:7a:e3:d7:
                    91:9a:52:78:0d:e5:6e:71:ce:35:dc:47:e2:1a:7e:
                    c1:12:5b:59:d5:c7:53:a7:31:b3:05:c3:fa:08:8d:
                    11:88:d2:30:6d:be:47:73:93:41:ac:5e:84:f5:16:
                    f1:6e:8d:55:6c:99:51:6c:b4:77:a6:fa:53:53:cd:
                    04:74:ca:fc:cd:d6:e2:80:ec:c9:b5:41:df:59:cf:
                    0a:c6:14:78:de:0a:22:f8:7c:a0:38:0f:99:bb:9f:
                    ae:54:e5:1e:56:b0:7e:a6:d8:7b:80:aa:7c:23:83:
                    49:52:49:8e:27:c1:68:dc:fa:0a:22:27:e2:16:c5:
                    5d:4f:15:97:4a:f2:46:01:54:5b:40:f3:1a:c8:38:
                    8d:26:f8:a6:3a:ea:8f:53:6e:1c:81:f0:46:44:22:
                    53:45:df:6d:5d:4f:14:de:ee:fa:2d:49:14:f0:ed:
                    a9:b8:d4:d7:92:5e:d1:2b:64:aa:b4:4b:c5:12:f2:
                    0e:98:55:61:9b:3c:d6:c9:04:bd:bc:e9:87:f1:43:
                    9f:20:ea:46:7a:d0:00:a0:d2:76:41:68:c5:f7:58:
                    1f:7e:b8:11:77:05:bc:2d:28:e7:ce:38:6f:b4:00:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:03:36:64:B2:40:0E:4D:F5:09:6D:36:3D:E3:86:86:FE:03:18:3A
            X509v3 Authority Key Identifier:
                keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:98:04:eb:56:08:3e:89:c6:82:f2:8e:aa:38:ae:47:56:
         47:92:4e:c5:3b:1c:fe:c0:85:8c:b4:af:bf:b4:a8:aa:16:9a:
         c1:40:3d:d6:8a:fe:d0:21:d9:95:47:74:c2:e6:9a:d1:9e:b1:
         0d:83:42:0a:0c:6c:17:1e:7c:a3:e5:2a:57:33:97:d0:f8:d9:
         8b:cd:33:60:52:3a:11:d5:cc:9a:8e:48:ff:1c:c0:7f:4b:f4:
         e7:83:f7:19:47:c2:ed:9f:29:9d:37:1d:01:e0:29:52:6b:8c:
         da:de:21:7a:fa:70:51:07:a8:c8:c9:2c:5b:bd:be:dc:06:5e:
         a6:5d:8d:4c:b0:ca:54:5c:55:cd:42:7a:51:b1:0b:7e:9b:cb:
         e1:79:5c:f0:a5:3f:2d:4e:5d:d0:ea:96:63:fc:aa:19:d7:f1:
         60:43:5a:5f:05:02:9c:d4:23:ac:3a:6d:54:c4:71:59:0f:e5:
         e8:37:e9:44:a8:ae:66:dd:57:7e:b8:43:20:c4:38:84:20:bd:
         3e:6b:60:4f:d0:f7:be:75:79:6f:21:2f:a1:88:fb:e1:5a:d2:
         95:d6:9a:21:33:de:6c:0b:ba:c4:ec:86:6e:41:99:73:f1:ee:
         2e:1d:a3:d9:d6:bf:2b:9f:54:5b:f0:3d:3d:82:9b:4b:a9:19:
         0b:1c:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----