Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File:                     9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier:          +CwBGKwOD8SvJYjdRvQBOrRMJqRyWurt9EdCJDNtTS4=
Subject key identifier:   EF:69:BE:18:B8:E2:94:46:10:F2:4C:2E:5D:0D:92:F2:6D:3B:A8:8D
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer:       /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial:       01962DF3EF58A4AEF20F4520B37E99CE3130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: PWMHa+vmD5aMD0xY/+7fQSz2dzDvgqLmYOvhWrDOOi4=)
                          2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ef:58:a4:ae:f2:0f:45:20:b3:7e:99:ce:31:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=ef69be18b8e2944610f24c2e5d0d92f26d3ba88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:12:11:64:b2:d9:9a:26:bc:1f:7e:f4:48:
                    70:9f:1c:b5:d2:f4:5b:23:37:3b:a5:f9:e9:43:05:
                    2b:61:30:5d:d0:68:14:da:11:b2:59:4c:84:59:ab:
                    10:80:70:b4:8d:88:bb:09:59:8f:55:aa:5e:e9:8e:
                    67:50:1b:66:81:bf:7c:37:6c:5e:6b:4f:40:75:26:
                    34:ad:43:6b:04:26:22:d3:49:cc:37:af:6d:b3:a4:
                    67:97:64:e0:6e:c7:9c:a6:2d:ba:dc:22:6b:42:52:
                    32:31:08:d0:0a:a4:0b:64:d9:5d:3b:78:b4:ba:0c:
                    42:da:94:1b:cd:79:bc:89:b6:d4:a9:9c:c2:e3:19:
                    06:17:e6:32:2d:99:6a:a9:32:b3:28:08:ae:94:ad:
                    b8:43:6a:de:3e:57:fb:99:9b:40:98:0a:7e:e7:90:
                    db:5e:92:49:6f:75:c4:4c:5a:62:a3:74:19:9f:7a:
                    05:e4:9d:b3:10:33:75:25:f2:ff:ff:12:e6:a0:9c:
                    73:59:c0:be:82:a5:9c:ec:9d:ea:e6:d4:26:69:c3:
                    8f:51:ff:c5:09:a3:57:28:90:cf:7e:8c:91:86:6f:
                    de:81:6a:6a:3e:18:cc:75:81:4e:16:d6:62:6a:99:
                    75:8d:a2:df:eb:37:18:ac:c8:f2:a0:77:5b:5b:c4:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:69:BE:18:B8:E2:94:46:10:F2:4C:2E:5D:0D:92:F2:6D:3B:A8:8D
            X509v3 Authority Key Identifier:
                keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:3c:aa:34:be:d2:e0:bf:8a:d8:2b:7e:70:d3:09:07:2b:
         8d:8b:17:12:f7:69:1b:de:54:93:2d:24:a6:78:5f:b4:4f:7b:
         30:6a:5c:1d:b9:a4:98:29:98:a2:11:b0:74:84:9d:22:69:9c:
         ec:a2:19:1a:70:ec:3a:1b:99:44:7a:2c:a4:eb:e2:d2:fc:ac:
         dc:3a:bb:fb:19:de:e5:2b:88:9c:29:e3:00:48:03:d8:bd:e9:
         a9:d1:8c:bf:71:65:18:21:29:b1:55:85:51:4c:e0:2c:77:81:
         d6:7f:dd:b3:60:93:45:b3:b9:2f:48:ad:15:ea:32:c0:1d:37:
         e5:58:39:28:52:ae:bd:ae:82:11:bb:52:75:e3:a9:37:c5:d4:
         47:24:1b:44:2c:15:10:8e:85:69:82:60:27:40:f7:93:5f:88:
         72:9b:6e:62:59:6d:26:08:74:b6:0c:14:43:02:2a:ea:f3:4f:
         a1:4c:55:55:c1:90:b8:b6:e5:50:b5:17:56:db:d7:51:59:1b:
         c7:c1:a9:67:50:25:41:2d:03:25:09:9c:8a:36:18:72:16:85:
         63:a7:b4:b6:21:ba:0c:b1:81:df:79:c6:56:e6:a8:eb:eb:3d:
         03:38:3b:5b:20:31:18:b0:30:47:42:d6:1e:ba:c8:ac:72:14:
         af:4d:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----