Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File:                     1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier:          dHnBAO/a8KErEUfeOcqFeQQqRdfjx+BKD9FaHUPgI60=
Subject key identifier:   F0:B2:92:96:EE:08:6E:A5:60:7C:83:1E:64:6C:FE:45:24:1B:A5:1E
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer:       /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial:       01962E98B8B17964DE6FA55BE9680498FDA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: GZK7UsJR2JFhZn7rtjAbfV+l6U1M7TVDETHKgWJHMzQ=)
                          2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:b1:79:64:de:6f:a5:5b:e9:68:04:98:fd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=f0b29296ee086ea5607c831e646cfe45241ba51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:d1:57:86:0e:3a:e0:d2:81:8a:69:2f:a3:
                    61:7c:dd:95:82:b3:8f:1f:f7:f6:a2:65:d9:3a:22:
                    46:fe:42:c1:ae:8e:b7:22:b3:84:c4:ad:90:3c:4f:
                    8d:04:7c:25:2c:d1:c0:06:89:ea:1d:27:4e:9d:41:
                    ce:c7:4c:c8:fc:d4:04:31:3f:e9:2c:21:a3:7a:6c:
                    95:0a:03:f1:c3:a6:68:03:45:f4:14:4d:ef:c3:66:
                    48:bf:86:3e:2c:6b:f3:25:03:11:fb:37:14:5a:2d:
                    12:6a:f8:26:f9:be:c5:7a:31:ee:37:bf:8e:ca:62:
                    26:28:bd:a3:b9:38:98:bf:ef:16:53:78:cb:75:26:
                    4e:95:64:fb:b5:97:f2:30:03:b0:dd:c3:76:b6:f0:
                    83:1c:cb:f2:bc:4e:9b:e5:3a:fb:c8:17:c8:82:ee:
                    88:4d:e9:a9:82:c9:19:8e:76:61:67:86:de:7a:95:
                    bc:64:93:15:92:9b:2c:7f:92:cf:8f:13:21:bc:70:
                    27:1d:3e:17:71:74:4a:be:cd:c4:d1:d6:ec:d0:0f:
                    82:d5:43:79:14:7a:07:d1:46:68:fb:97:3b:47:8b:
                    3d:35:cf:f9:d8:69:cb:c1:66:4f:e7:89:26:b5:bc:
                    7b:df:df:3b:76:42:d3:35:47:88:1d:a6:f0:da:6d:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B2:92:96:EE:08:6E:A5:60:7C:83:1E:64:6C:FE:45:24:1B:A5:1E
            X509v3 Authority Key Identifier:
                keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:32:80:a0:7e:d6:8c:f9:30:fe:a2:ee:e5:ab:0e:6c:89:
         5f:37:45:3a:3d:6a:9c:aa:66:b1:17:e7:16:58:a1:70:0e:56:
         ea:c5:75:02:01:58:dc:17:86:2f:06:b2:6e:3c:32:b0:ac:db:
         df:5c:22:c3:f6:dc:6d:13:83:81:c6:7c:20:74:ca:b7:32:83:
         3b:95:42:38:6a:43:a5:73:c9:4e:e9:b2:18:91:52:07:74:65:
         e1:50:bd:97:b7:bb:77:ec:8d:96:99:49:c3:3c:af:c0:92:7e:
         b8:aa:43:83:aa:17:6d:ea:ed:19:aa:2b:f2:76:97:11:48:a3:
         1a:80:97:56:85:a8:eb:aa:f2:6b:86:36:f8:46:49:ab:ba:5c:
         7f:c1:8c:0f:5f:12:5a:ca:53:b3:87:13:16:91:bc:c0:3b:cf:
         d3:2a:1b:03:bb:bc:46:eb:89:7e:ce:18:c9:5b:37:79:7b:ba:
         99:9f:57:92:e8:ae:b5:32:08:63:e0:23:89:f9:8d:b4:d4:59:
         c1:c7:33:09:55:cf:b2:4b:74:6f:57:1a:96:0b:35:9c:a3:fc:
         d7:7f:21:06:a1:b2:33:9c:c4:8b:36:80:04:f4:a5:d0:8f:0b:
         84:51:35:a9:8c:32:04:1c:5b:5f:38:cb:c2:b8:bc:41:55:8e:
         36:85:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----