Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File:                     RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier:          ANFssFq9zGQUe1GS7IVRPGZzDzUzIMEq/IJCYBrh3g0=
Subject key identifier:   1E:99:BD:E9:44:03:26:F5:86:A8:B3:1D:E6:DC:3F:C0:F3:16:E9:74
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer:       /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial:       01962E2ADA1BDDFF860946D3803E3CF39BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: BfFDEIOLRbP2n+h0N4mhh360xMM6+ZTQaxkYAzPEOps=)
                          2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:da:1b:dd:ff:86:09:46:d3:80:3e:3c:f3:9b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=1e99bde9440326f586a8b31de6dc3fc0f316e974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:c3:c7:de:39:fe:5c:23:4e:79:79:cc:63:
                    fc:39:3e:6a:59:8f:4f:94:37:71:38:bd:5d:db:e4:
                    c7:90:a1:f7:b6:8f:71:b4:16:b7:f0:cc:6b:f3:1c:
                    37:f9:74:f0:8b:36:84:14:4c:0d:9c:12:d7:db:9a:
                    ec:c7:42:a8:8d:09:40:09:fc:e8:0c:b7:bf:45:91:
                    30:cd:80:48:32:c2:13:4d:60:38:b7:b4:37:c9:c1:
                    e9:d1:c3:e8:ba:70:a8:d6:50:3f:3c:f2:6e:e6:e7:
                    0b:b2:2a:a8:3f:71:bb:ee:cd:84:43:ba:4f:31:c1:
                    2f:e5:4d:66:28:04:e3:9a:dc:42:17:21:20:6d:3e:
                    bc:8b:3e:af:5c:23:e9:c4:96:24:48:75:83:e4:c2:
                    2f:7e:6c:86:64:77:3e:14:f1:81:1a:3a:15:08:3c:
                    9f:61:5d:1f:0b:ea:e4:3c:84:9e:d3:1e:af:90:76:
                    db:5d:78:72:9f:b8:cc:2e:c3:1f:dc:a6:fd:06:b2:
                    d7:2f:1f:ce:48:6e:41:e4:3a:6f:3d:6c:82:33:1e:
                    b2:17:f7:7e:24:77:e0:43:87:57:0e:4d:93:e4:30:
                    08:c6:e4:30:95:2a:8f:aa:4c:13:76:1f:b1:54:ec:
                    9e:35:e7:36:80:23:9c:a3:af:f6:35:ca:9f:46:c7:
                    b8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:99:BD:E9:44:03:26:F5:86:A8:B3:1D:E6:DC:3F:C0:F3:16:E9:74
            X509v3 Authority Key Identifier:
                keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:eb:6f:ba:90:48:32:05:5e:f7:23:09:de:73:87:6f:1c:
         c9:7c:ff:cc:74:35:b3:d5:64:bb:9d:89:d3:e2:cd:87:83:89:
         77:d3:d3:42:4a:ae:f8:1c:a7:4b:71:87:64:f5:1f:fb:9f:c6:
         33:64:03:cc:09:b1:b5:69:43:4e:cd:1a:70:79:db:c4:08:55:
         20:0e:34:4e:69:7c:26:1a:3c:6d:4f:11:c8:49:81:88:01:1d:
         b1:8f:fe:a8:90:f3:47:59:56:7e:be:3f:c3:3a:8e:de:57:da:
         15:18:c9:d3:71:4d:ec:80:0f:81:61:ca:1d:ee:35:87:3f:e5:
         9a:de:4d:52:c9:c2:2f:85:27:95:a9:5b:aa:16:c8:a7:eb:76:
         5b:46:2c:fd:80:b9:74:3a:00:95:f5:5c:9f:b5:71:09:92:c4:
         78:29:94:7f:34:bd:13:dc:c5:12:b6:e2:c2:ef:fd:58:36:f3:
         d4:c6:0b:65:cf:c7:a3:94:f6:ce:99:c8:5c:39:b9:c8:e6:4f:
         6c:58:9b:e1:28:10:f7:a7:39:6c:15:bd:e5:eb:cb:6f:65:f8:
         c1:4e:26:1b:4d:fa:8a:10:1c:f3:6d:67:c8:bb:a5:02:45:10:
         51:55:54:5a:91:73:03:bf:56:2a:fe:37:0b:81:97:db:df:fe:
         86:21:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----