Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File:                     l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier:          oBJF+3lWQ+8f8IdLiK3nJwiY17JR7CVdQZffs72YUxQ=
Subject key identifier:   2E:91:8C:51:9F:5D:34:EF:71:06:01:A7:41:94:12:02:13:C8:80:A7
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer:       /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial:       01962E98F5A92B3501EF508E550C4DD57AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number:          1001
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
                          2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: LmGnE/604imwbrFIW/JoVOf1uyy0fkwlb3NOJsFwnwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f5:a9:2b:35:01:ef:50:8e:55:0c:4d:d5:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=2e918c519f5d34ef710601a74194120213c880a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:aa:11:9e:e7:ad:bb:36:35:f6:8b:ef:ea:
                    d5:0d:90:1c:3f:a1:78:46:1d:0a:e9:5a:4a:ec:ad:
                    ea:28:21:5c:fd:0a:25:07:60:cb:e3:11:c7:71:18:
                    c9:bb:fc:58:db:27:ee:8c:b0:c9:c1:8a:fb:39:37:
                    8c:cd:22:e2:62:4b:98:51:0c:63:f0:64:43:8b:12:
                    65:27:b0:fd:14:62:de:9c:7e:fc:ba:5d:e7:5f:9a:
                    c0:14:1c:94:d2:73:d8:8b:83:0c:fe:83:7d:41:d2:
                    82:9d:7d:6e:97:4a:21:ed:83:70:d2:2d:f8:1f:d5:
                    60:90:53:3d:5f:84:54:90:d9:38:23:d0:7d:a2:ef:
                    99:e7:1a:e6:5d:a5:87:2c:64:fc:5a:bb:8d:f2:36:
                    02:ab:6d:3b:ff:b1:ef:c0:40:e0:58:57:83:f5:08:
                    ad:2b:23:41:e8:03:b3:2c:ba:91:10:56:fb:5c:74:
                    02:3b:fd:28:66:58:c2:7d:38:ad:dc:7e:79:99:06:
                    bb:b1:f6:ab:c0:20:c3:28:3c:6d:d4:c5:07:b1:d1:
                    a4:5a:a4:3f:b3:43:d8:53:0c:48:91:74:e5:7d:be:
                    9e:e6:08:66:f5:09:4d:e8:43:47:7c:95:4d:24:99:
                    c4:bb:f2:ca:0c:5e:ab:43:72:65:1f:55:26:b9:e2:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:8C:51:9F:5D:34:EF:71:06:01:A7:41:94:12:02:13:C8:80:A7
            X509v3 Authority Key Identifier:
                keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:09:0f:7d:78:2d:67:e8:70:b4:ab:49:cf:e8:cd:a3:63:
         e2:4f:52:9e:d4:4e:19:34:cc:74:b2:ba:08:be:16:aa:bb:69:
         15:d5:ed:d3:68:1b:22:a9:eb:d7:40:ac:cf:d7:07:59:74:5c:
         3a:30:f2:8d:c7:e2:81:9a:7e:94:65:83:dd:ab:f5:5e:8d:67:
         51:b8:68:8c:e2:26:6b:93:ba:cc:49:96:56:47:8f:72:d1:59:
         9b:55:c8:7b:11:48:ca:4c:f6:d1:c1:c9:35:31:e4:9e:9b:14:
         59:73:91:03:85:40:f8:5d:78:f2:78:43:47:81:19:07:77:52:
         22:63:d3:c5:3a:3b:48:5a:e8:9a:f2:e5:91:52:54:5a:48:d8:
         23:64:8a:ff:8f:a8:81:17:7c:49:1b:9c:dd:c6:82:a1:ce:11:
         12:93:54:18:b0:09:97:ea:45:b0:78:2f:f6:4d:81:49:c0:55:
         7d:f6:44:64:15:d1:09:12:df:95:0b:a7:7b:55:e5:70:18:9f:
         a2:dc:4c:b9:25:8d:70:6a:b1:7f:19:fb:9c:6f:4b:31:00:80:
         9f:9e:ac:4c:e3:e1:8c:a7:6d:6e:0d:6e:c6:f2:cd:26:1d:b3:
         b9:9e:a5:f2:11:76:a8:b4:17:c8:d9:d5:7a:d4:ce:6d:97:ef:
         c3:48:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----