Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File:                     9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier:          T3ZhAw+67iLifg8HCE3+jZqRraLQvyB6g9bf5zRxq0Q=
Subject key identifier:   72:76:E3:04:FE:82:E8:2E:18:16:8F:0A:F8:C1:E7:87:93:B2:41:75
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer:       /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial:       01962E61D963DE034AAA75A690A928AD1432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: bxNBAhwQPhRa0J+M5UvliED1BcY5bEAiLOER/wQ+2aQ=)
                          2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d9:63:de:03:4a:aa:75:a6:90:a9:28:ad:14:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=7276e304fe82e82e18168f0af8c1e78793b24175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:26:7f:28:ac:65:56:3f:ec:57:0b:80:3d:
                    01:c4:35:44:0b:f2:8e:ca:28:f9:87:23:8b:1f:57:
                    26:13:7f:a8:24:4b:a7:fd:b9:10:d9:7e:60:4f:ca:
                    83:6c:82:19:ec:c3:7a:ea:41:ae:55:5a:da:0c:f2:
                    03:91:2d:81:19:c2:fb:cf:49:4d:2a:ca:44:8e:a5:
                    77:39:b5:93:2f:6e:87:92:48:fe:0e:16:8b:b4:c2:
                    fd:09:33:8a:53:e6:be:4a:63:45:ce:db:c6:ad:f7:
                    38:93:32:56:52:d5:a4:17:e2:44:eb:f6:e5:c7:8d:
                    6a:90:71:24:68:62:c7:f8:ed:6a:f7:c2:07:ce:96:
                    4e:6f:4e:8d:cf:a4:5e:30:b8:c6:1f:99:f4:21:ef:
                    2d:6a:aa:f0:e9:72:05:2f:64:17:fc:65:44:3c:aa:
                    01:e2:55:e2:e2:25:34:88:8b:e4:3f:0e:d5:1a:7f:
                    c5:c3:6e:4a:2e:4e:3c:20:fa:30:0a:b8:7a:7f:03:
                    76:85:3a:31:ad:22:8b:f8:81:e6:2d:5f:7d:e2:f9:
                    52:21:b0:16:f8:d1:90:92:7f:e6:88:7e:d9:cd:cd:
                    f4:34:df:ee:d8:ac:18:78:f7:70:42:88:65:5d:fe:
                    7f:62:a0:c7:53:96:4e:07:69:cf:06:ba:8f:e6:3b:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:76:E3:04:FE:82:E8:2E:18:16:8F:0A:F8:C1:E7:87:93:B2:41:75
            X509v3 Authority Key Identifier:
                keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:12:77:cc:49:bd:4f:3b:57:0a:25:7d:df:cc:45:ad:94:d7:
         7f:3e:a4:a1:fe:d8:a4:27:f0:ae:66:35:0f:e3:9e:03:55:7a:
         42:98:05:fd:ef:63:2a:5d:90:3c:b7:b2:55:59:14:80:5e:7f:
         4a:38:06:94:2c:4e:55:cc:ea:ef:75:11:04:cb:5e:21:c0:21:
         29:d3:06:12:bd:42:d0:da:2f:5a:b0:df:a2:ba:7b:f3:41:de:
         21:90:56:40:ff:3e:d7:bc:e9:25:f7:5c:6d:31:39:db:0c:60:
         b4:dc:0a:d0:77:60:e6:8e:78:a0:e6:be:d2:74:28:26:db:2f:
         8d:02:6f:79:09:6e:cf:c1:e6:b3:ba:9a:71:66:be:01:7b:58:
         cf:c7:fd:c9:f9:8c:c6:f0:ea:e8:52:c1:98:fb:a9:c0:6c:7f:
         99:38:94:01:2c:f7:96:fe:d8:72:11:d9:b0:a2:3a:6f:f7:0a:
         06:14:b1:cd:cf:9e:c6:d1:bd:03:7a:2c:0a:ec:54:d4:a7:7a:
         cb:31:5f:00:d7:a6:bb:8d:d6:ae:81:c2:b6:0f:2a:63:54:26:
         dd:0b:d1:2e:5c:d6:56:73:ea:bf:2f:42:e5:7d:4e:8f:dd:8d:
         a8:64:01:58:fc:1a:e4:78:78:83:23:9c:f4:6c:29:26:35:60:
         3f:56:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----