Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File:                     9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier:          d3qInwOr9Lq5TM42RQoEUt5B0koK/yqVYF9dLcwWxHQ=
Subject key identifier:   42:13:02:6B:3E:51:74:A8:C8:AF:B7:01:91:2F:06:81:5E:2D:C7:CA
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer:       /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial:       01962E61CB292910192B4B49400447D3D5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number:          0E62
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
                          2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: uo5CSNZKA+v64JAe3hXCrA9iy0RsI5/mNVJj1bwIsiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:29:29:10:19:2b:4b:49:40:04:47:d3:d5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=4213026b3e5174a8c8afb701912f06815e2dc7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:38:a4:4f:13:32:d9:cd:39:81:26:d0:5c:
                    49:2d:c5:7f:34:c7:80:90:4e:e6:40:7a:ed:be:07:
                    4f:9f:69:37:5f:ba:7e:57:e8:9a:82:cd:74:d0:e0:
                    81:db:b0:05:fb:d1:77:79:3d:87:5d:55:ce:cd:fe:
                    a4:74:d1:e7:4e:4f:a7:8b:e3:80:52:c2:7d:fa:f3:
                    70:0f:51:10:02:73:8c:d1:14:c5:14:c0:7d:be:af:
                    b6:8e:bd:4e:38:08:52:c7:04:34:f8:14:3a:dd:2e:
                    f5:70:ab:3f:0c:97:e2:4c:b9:0e:73:10:3e:d9:1e:
                    7f:0d:57:62:f0:13:00:25:e8:b0:66:99:9b:b8:d5:
                    bf:da:54:9b:1f:08:16:50:86:84:3b:b9:32:09:29:
                    74:e1:17:6c:e0:30:e9:0b:c7:40:51:e0:2e:3b:8e:
                    d0:24:6b:b0:ca:5b:c3:ea:d4:94:80:83:42:70:1e:
                    c5:3a:9c:c6:29:de:d0:c6:9b:7d:fe:49:f7:03:9f:
                    d0:91:ce:4a:8a:7e:8e:ec:d5:09:5a:56:58:6a:8d:
                    0c:9c:6f:c5:e2:bc:79:6d:aa:34:a5:03:ba:68:b8:
                    a4:75:03:55:00:0e:26:df:de:e5:7a:f5:14:9a:0b:
                    71:87:62:85:50:9e:7d:51:2a:bb:fa:cb:0f:8e:03:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:13:02:6B:3E:51:74:A8:C8:AF:B7:01:91:2F:06:81:5E:2D:C7:CA
            X509v3 Authority Key Identifier:
                keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6e:c1:4c:29:ff:8a:eb:12:d6:b7:33:41:7a:0e:1c:f2:ca:
         3d:63:ce:e2:cc:b9:58:cd:5e:14:17:c6:33:d5:78:38:a3:08:
         ad:f2:7a:09:25:d0:1a:8a:9e:32:7d:f1:88:11:01:5e:20:e4:
         7d:a6:5c:76:db:05:c0:10:01:08:f5:5d:eb:3a:ab:16:c8:92:
         f6:5b:2d:b6:f4:97:fb:a1:b8:e3:e5:0c:fc:26:64:8c:f0:5f:
         a1:19:15:0c:6d:be:06:f3:95:d8:01:ff:c1:e5:28:bc:97:5a:
         0b:d1:80:ee:3d:d9:dc:a1:72:f7:50:29:cb:98:b5:65:67:93:
         15:82:c4:22:e1:fd:4f:3e:8e:14:e6:0c:46:1b:27:b4:52:39:
         c8:be:c3:2b:18:a1:3f:f4:24:73:7d:db:f3:da:8e:66:45:a1:
         63:12:09:87:0e:a1:37:1c:f8:42:4b:8b:a7:bc:c1:f1:73:77:
         ef:52:88:f1:1b:03:06:3e:dc:e1:df:df:36:ff:c0:0c:db:0a:
         5b:63:92:2d:78:fd:37:d6:af:e7:bf:8d:0e:0f:99:c6:64:d7:
         63:52:aa:2f:11:85:e9:05:ec:d6:98:81:48:af:9f:ad:b1:9e:
         c6:ad:c3:a0:dd:88:d5:19:cf:1a:8f:bb:25:33:48:1c:89:de:
         45:8f:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----