Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File:                     M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier:          8dTyXwu9/JnSPz8hHlFnarqMA3Tc1WbJjd4UvikCTwU=
Subject key identifier:   BD:45:01:F6:63:E2:0C:9F:B5:0F:6D:19:92:5C:22:E5:16:46:29:0A
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer:       /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial:       01962E998502A1ABF2F9EF449299CBF876C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: m5WxjEx4QlPL/p1tMeZBWj8KLAok+YNKYr0XESJ2VI4=)
                          2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:85:02:a1:ab:f2:f9:ef:44:92:99:cb:f8:76:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=bd4501f663e20c9fb50f6d19925c22e51646290a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:a7:83:f2:06:00:78:93:0c:b8:25:af:c9:
                    c7:6e:22:2b:cd:d4:ce:a7:a5:0e:1c:d6:a5:9e:bc:
                    da:0d:1f:d3:2e:bd:18:34:55:5a:ee:01:a2:02:9d:
                    74:9d:5a:9e:08:8a:23:16:16:72:2c:0a:7d:5a:48:
                    17:98:d6:0f:07:81:2c:00:37:c4:67:8d:8c:09:fa:
                    01:ab:df:f1:bf:da:92:c2:ef:34:49:60:96:cc:d5:
                    42:ed:2d:67:41:b1:e5:1c:a0:73:96:bc:68:ed:db:
                    e8:ee:7f:f6:81:ea:03:7d:52:e6:7e:c6:d3:52:cb:
                    a9:ef:bc:85:97:eb:8d:a7:0e:ce:57:d3:0b:c5:39:
                    3e:a7:62:11:c4:80:f7:44:67:30:d6:c5:f8:27:0b:
                    d8:3b:12:98:91:5d:9a:ca:ef:eb:77:5d:86:60:b2:
                    9a:48:66:1f:65:a8:ce:59:df:9e:d3:89:62:9b:24:
                    8f:77:58:02:77:15:ad:74:62:3d:86:60:9e:03:86:
                    bf:e5:e2:96:bc:1e:0d:b5:b4:4a:24:7d:90:19:8c:
                    7a:ef:a2:2b:5d:46:a1:1d:35:bf:ed:cc:05:72:7f:
                    74:60:ea:1b:6b:be:12:a8:8c:dd:7f:9d:d4:44:c5:
                    0c:22:50:b2:28:0b:b5:60:f6:7f:31:00:91:18:82:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:01:F6:63:E2:0C:9F:B5:0F:6D:19:92:5C:22:E5:16:46:29:0A
            X509v3 Authority Key Identifier:
                keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:dc:0f:42:15:f2:8a:e0:28:2e:1b:44:2a:68:72:fa:2b:dd:
         c6:6f:57:0b:18:22:07:6f:79:51:45:af:80:31:94:71:6b:2f:
         b9:33:2c:b0:ff:f1:10:14:b7:80:41:71:08:82:94:2d:04:87:
         e9:04:03:50:bc:ac:96:3d:ea:d6:a6:0a:0b:51:67:3f:99:5d:
         8e:d5:33:a7:62:58:e5:fc:fd:2a:3b:03:d7:82:6a:c2:0a:ac:
         4c:78:9d:c2:c3:26:58:99:45:38:a5:ba:23:4a:f6:90:7d:ef:
         67:ed:09:c8:cf:25:bd:4b:82:15:1a:1a:b2:14:57:69:fc:da:
         b0:5c:d0:64:08:6d:12:56:2c:08:58:ff:e4:17:02:7a:b7:5c:
         d0:f8:4d:5d:07:94:e3:41:01:38:65:33:a3:37:05:3b:af:89:
         30:54:a6:d1:45:14:fe:d0:01:2b:09:10:d1:bf:d1:a5:e8:51:
         8c:f7:c3:fd:82:d2:09:df:49:68:30:17:f1:34:6c:8b:a2:4c:
         d9:40:21:46:bc:da:58:45:6f:91:14:6e:88:db:c4:a8:f0:46:
         95:04:9c:6c:a9:71:33:3c:96:18:bd:1e:9e:f5:16:56:61:d4:
         62:67:26:52:c5:e8:70:a6:0d:28:e1:c0:72:c2:f0:db:2d:bb:
         36:95:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----