Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier:          dCVLMZU54Ws88jTYftCChbJN2OFaxtmak8x8gKmDqao=
Subject key identifier:   50:F3:E0:A3:4E:4B:F9:0D:92:6B:40:01:99:E1:6C:6C:FB:D4:CE:6A
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer:       /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial:       01962E98E5D791391D5A3B597DF9317294A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number:          0AB2
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: XKWSejN1lddxhzarYfgbshomCHIMXvGjMvGaizNRsQ0=)
                          2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e5:d7:91:39:1d:5a:3b:59:7d:f9:31:72:94:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=50f3e0a34e4bf90d926b400199e16c6cfbd4ce6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:38:df:b8:d2:e5:43:64:6e:52:12:57:07:
                    4e:0d:db:59:06:40:08:3e:83:23:c6:f2:d5:d2:ff:
                    2d:82:7b:7f:4b:58:b1:59:2e:bc:5d:04:b1:16:50:
                    03:bd:7a:72:37:cc:db:50:0b:08:ba:3b:bb:64:f6:
                    bf:6c:2a:92:28:37:27:1e:53:1b:ab:c5:c5:2e:f1:
                    27:c8:62:bc:9e:1f:62:1e:f3:1c:4c:77:62:ff:c6:
                    fa:94:03:02:a4:1b:1d:89:9d:80:d7:7d:ed:ca:07:
                    bf:db:11:6e:79:bd:7d:16:6e:d6:6d:d9:44:ee:b2:
                    d0:f1:e9:05:7a:d4:90:bb:04:7b:15:52:2c:04:1c:
                    d0:63:ac:f5:4a:59:85:00:93:ae:cf:1e:98:9f:49:
                    b9:a2:11:f1:2c:5e:93:4e:d4:f7:cd:23:cb:96:4d:
                    d9:11:13:00:d3:26:ca:49:47:56:06:80:77:da:94:
                    0d:52:e3:9e:06:89:5a:e0:d2:10:55:6e:66:6f:3e:
                    8f:e3:d6:2b:10:23:a4:21:8f:40:09:07:67:0b:bc:
                    57:10:5e:69:7e:57:4c:49:8d:e8:5f:ce:6f:38:6e:
                    a1:30:4e:a9:5d:fc:69:8a:98:fd:86:3b:09:38:69:
                    d4:66:68:17:44:be:3f:08:2e:28:0a:e8:c4:a6:f7:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:E0:A3:4E:4B:F9:0D:92:6B:40:01:99:E1:6C:6C:FB:D4:CE:6A
            X509v3 Authority Key Identifier:
                keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a6:f6:0f:45:02:99:59:0e:6e:7e:36:38:59:67:45:13:2c:
         2b:5a:c5:4a:a6:cf:40:72:2c:2e:6d:55:ef:1d:ac:08:53:c3:
         7e:84:48:6b:43:5f:43:15:d5:9c:fd:a9:2c:48:4b:6b:84:df:
         b8:7d:a8:3a:c7:3d:08:2d:7c:b8:bb:4f:20:a7:58:7d:07:b7:
         e1:03:73:35:44:35:70:95:d3:4f:81:f8:2e:83:c7:42:e5:5a:
         dc:52:61:14:6c:c4:98:ff:6e:e3:bc:a7:c4:88:b5:b8:96:de:
         ba:43:68:c6:37:2f:c9:05:13:f4:4a:52:ca:6e:97:8f:77:b2:
         da:75:42:9d:6e:6e:7a:15:2c:aa:af:fb:da:36:d6:98:10:d5:
         c2:d4:78:f0:10:f4:f8:52:c7:32:fd:2d:f8:c9:a0:e0:4d:78:
         7b:61:7d:08:be:7f:64:11:f4:00:1e:18:1c:b3:47:7d:26:3e:
         63:de:54:f5:3b:9b:bd:e6:e2:e4:33:0a:6f:9a:8e:cb:a5:e9:
         76:6e:92:3c:e6:81:7b:24:90:a1:62:0f:71:88:54:f7:57:d7:
         a3:61:d9:f2:b2:85:48:08:15:5d:ce:21:a4:62:b3:3f:fb:f9:
         50:42:51:5f:09:e3:53:da:96:fa:36:9a:c1:59:ea:77:31:1a:
         b1:6d:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----