Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File:                     1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier:          1/kE/+BIWRemMWu6ninLI7rXLbx2P/oDKKLjsMCCVQc=
Subject key identifier:   67:DA:49:37:03:AB:FF:F5:94:B7:AC:35:0F:0E:DD:3D:B5:8A:45:26
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer:       /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial:       01962F06F2FA8C90AAA6418341B4253D4EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: v8+77yVxysDu3Q/bprQcVEUuIyVnFYGifko3hxFR+9E=)
                          2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f2:fa:8c:90:aa:a6:41:83:41:b4:25:3d:4e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=67da493703abfff594b7ac350f0edd3db58a4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:8c:93:18:42:9f:5d:4c:93:62:39:a1:9d:
                    d9:fc:6f:b0:5c:4f:0d:37:f9:8b:bb:d7:10:21:3e:
                    ca:a8:c1:6b:9b:f5:98:81:46:6a:15:f1:2b:49:34:
                    7c:b0:bc:0d:0a:57:3c:d4:56:dc:0a:5b:5b:6d:ea:
                    65:f3:1a:ae:d3:23:17:48:fd:45:17:c6:3e:51:0a:
                    79:d1:22:a7:59:8d:b8:08:dc:38:e9:d2:4a:f0:7f:
                    0d:7e:2d:8d:9d:f0:2f:44:15:db:9d:6d:67:6b:eb:
                    ec:43:f4:46:a7:1d:34:9c:eb:e1:95:b8:20:c1:ec:
                    d4:1e:4c:cb:fd:23:ac:f4:a0:8d:15:38:01:80:7b:
                    1e:57:bb:d7:55:29:50:51:e2:a5:7f:ab:b5:e0:c7:
                    a2:c6:fb:f0:26:14:ee:6c:3c:80:0c:62:af:60:63:
                    38:0d:f7:df:53:e9:45:8e:6a:e6:80:6a:fc:e0:23:
                    52:a4:b1:0d:d9:b1:c4:9d:4a:cb:a7:7e:65:6b:a9:
                    a5:33:e1:85:2f:9d:05:35:bd:c7:b0:a9:40:5c:11:
                    25:c8:c5:e4:d3:84:23:8b:ba:7f:f5:dc:79:73:4f:
                    f1:29:3c:7e:42:53:b5:d2:95:9c:53:5c:cb:d1:0c:
                    0e:97:8c:6b:9b:60:97:32:d7:de:a4:73:27:62:8c:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DA:49:37:03:AB:FF:F5:94:B7:AC:35:0F:0E:DD:3D:B5:8A:45:26
            X509v3 Authority Key Identifier:
                keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:29:7d:5d:78:70:21:d3:b8:44:cb:bb:cf:c2:71:c2:93:01:
         e5:f2:4e:10:8d:b8:61:24:66:d7:ec:f5:de:60:e3:1a:28:33:
         47:96:cd:cc:bc:b1:6d:4f:3d:df:d4:71:d8:d2:87:1c:80:5c:
         96:6c:49:47:99:07:c9:09:83:aa:23:ab:9f:01:05:69:35:de:
         da:68:1c:55:1c:7a:28:68:85:5b:aa:2b:3d:b5:f5:18:e6:22:
         cc:bb:dd:b1:1c:a9:e1:7b:0c:c6:e1:c9:aa:11:29:91:e3:90:
         46:14:fd:79:00:52:17:ca:0e:b8:73:2f:7e:8c:a1:ef:96:20:
         47:4f:3c:95:a7:18:18:f4:c4:88:7a:21:43:00:68:33:ae:3c:
         58:8a:34:ef:99:41:17:d6:b7:6c:06:d2:a3:8a:62:a8:e5:45:
         86:a1:c2:5a:f8:5b:b9:15:bf:5e:3c:6b:99:3b:c2:36:d8:34:
         0f:5b:ad:23:e7:db:39:95:c4:00:6b:f9:e2:7c:04:3b:05:47:
         09:48:4b:17:f9:24:b0:6d:9c:1d:84:24:5b:95:38:c6:32:5d:
         55:24:3c:77:ef:17:f0:27:31:d6:b4:f0:3b:c1:63:0c:f8:1c:
         d4:b5:98:74:c0:3b:aa:54:45:39:86:8a:32:ac:3c:fd:30:41:
         60:d7:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----