Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File:                     cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier:          vViHMTKs6whg/qhzI9t0I4rKAVmHZckOMuH/h+dNm7k=
Subject key identifier:   9B:D7:F6:C2:93:4B:8B:24:F5:6D:1E:68:30:7A:92:09:37:78:36:D1
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer:       /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial:       01962E993970E50AA9FE40B0849ED5CD9F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number:          0340
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: I/uGRh73eRB/C3T1ceUf0out4k/ozdLs08pfZ1bt1ec=)
                          2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:39:70:e5:0a:a9:fe:40:b0:84:9e:d5:cd:9f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=9bd7f6c2934b8b24f56d1e68307a9209377836d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:63:93:50:86:db:7e:e5:c4:cb:0a:3f:b8:
                    12:e0:e2:d8:a5:cb:64:4a:f5:65:a6:35:36:db:7f:
                    1c:48:e8:58:f4:b3:09:c2:d1:2e:96:3c:84:5f:27:
                    77:b8:9d:9a:e7:d9:f3:a3:70:e3:85:6b:56:c0:ee:
                    76:17:96:7e:56:c2:f8:7c:e3:6c:1a:92:42:12:4e:
                    f8:5d:ee:41:0f:8a:cc:39:0f:46:a7:8b:54:d6:53:
                    71:02:41:9a:2f:b1:82:52:ab:28:4b:7c:bb:b8:71:
                    68:7c:00:30:66:c8:97:bc:32:99:51:a7:d8:1e:09:
                    bb:fe:a7:e8:b0:b7:3a:d0:52:11:32:4d:9a:0b:d9:
                    02:ed:2a:79:cd:2d:f0:da:18:f1:fa:27:ae:54:5a:
                    48:3d:29:47:f7:9e:46:4e:1c:b6:7d:1f:af:13:89:
                    e1:29:61:2f:16:68:7a:ea:c7:93:3f:a4:e7:db:0a:
                    d7:44:10:d9:98:b3:f8:df:a9:c7:13:22:42:96:1c:
                    d4:db:4d:3a:6b:d2:c3:5a:ec:6b:60:e2:2f:9b:6d:
                    55:7e:64:47:3f:bf:36:3f:1a:7b:6d:b2:ca:72:6a:
                    7b:c8:62:33:27:a2:57:ae:95:42:9e:1b:fd:6a:94:
                    d1:70:d4:34:1e:b8:ac:96:50:aa:d7:aa:f6:5c:6b:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:F6:C2:93:4B:8B:24:F5:6D:1E:68:30:7A:92:09:37:78:36:D1
            X509v3 Authority Key Identifier:
                keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:cd:30:d2:e3:9d:58:d3:bf:5d:c6:20:e7:35:d3:1d:04:
         65:2c:44:22:a4:c7:74:54:ed:d6:91:74:cb:ec:e8:5b:ef:f4:
         c1:d6:a4:99:c3:38:dd:b0:87:3c:55:2c:fd:68:1a:31:f3:be:
         aa:ef:5f:a8:e2:d1:c9:1f:b0:9a:dd:e2:71:b0:31:86:9a:b7:
         09:ea:7d:2a:0a:28:ea:8e:5a:1f:0d:39:54:09:36:3c:24:fd:
         28:34:02:c3:c6:d2:95:3c:d1:73:e6:fd:92:01:18:d9:c0:b1:
         4c:08:69:7c:c9:c8:71:e6:c1:56:5b:ff:4c:2e:91:2e:a5:01:
         1b:3a:4e:50:ed:a3:66:18:57:b4:33:b7:41:16:5d:b7:d6:28:
         76:48:8c:9a:3a:fb:21:3f:fe:68:90:a3:c7:39:be:54:39:fc:
         d7:9e:a8:6b:c5:51:70:8b:8c:be:77:98:3e:6e:be:17:49:87:
         5b:21:22:d6:74:fc:21:5f:b7:28:82:13:3f:41:5a:68:35:d8:
         b3:c5:0f:48:42:86:fd:93:b7:f7:55:9a:f4:9c:1d:6d:ec:38:
         49:6b:4b:42:4f:95:40:23:30:7c:15:14:00:05:7b:f7:7f:03:
         d5:89:d4:58:b5:94:1e:2c:78:b8:f0:23:41:64:76:78:41:b5:
         e3:8f:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----