Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File:                     CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier:          lX+2VOpOIEgDPfMC5mN8WBEm9zquQBF0JRgmAES087Q=
Subject key identifier:   07:0D:DB:2B:9C:89:9F:C3:2F:DA:C9:E3:F5:91:4B:39:44:E6:B4:F0
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer:       /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial:       01962E98ACFCC9BF93C50EB8795037787B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number:          12AE
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: 0RrxhFDyYkc5/DbFC0XZwsXIO/1pDu5RCjOFuU5za2c=)
                          2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:fc:c9:bf:93:c5:0e:b8:79:50:37:78:7b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=070ddb2b9c899fc32fdac9e3f5914b3944e6b4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:c9:e1:6f:01:6a:f9:cc:a3:a0:b2:50:1f:
                    48:b6:30:da:b7:c6:32:3f:fe:6c:e3:8f:e3:43:35:
                    e4:24:7d:ee:74:dc:52:95:d3:bc:75:07:89:5d:9c:
                    bb:2f:5e:38:51:4a:70:a5:c3:39:0d:40:fa:39:eb:
                    9c:bd:44:b2:c1:96:a3:96:17:f9:fe:8f:a3:f4:a0:
                    96:22:d4:81:70:7f:9f:07:2b:5f:8c:2f:7c:cc:cf:
                    2a:5c:9c:53:06:94:94:02:2f:35:59:73:3b:d6:53:
                    1d:5a:2a:71:0b:c1:62:7e:3b:cc:eb:b6:0e:0c:2f:
                    72:7d:8d:4e:18:eb:10:7a:a1:d4:99:78:77:2c:11:
                    2a:04:20:63:3c:23:4b:97:c8:22:e9:23:a7:21:8c:
                    80:08:db:db:e5:64:c8:2e:c6:36:b6:00:34:9a:e9:
                    a1:4e:c4:9a:38:d9:3a:c2:36:5b:79:c3:6f:59:08:
                    e1:7e:26:0a:2f:bd:b6:37:c9:dd:2f:1f:49:40:92:
                    3c:4d:eb:7b:9c:48:97:15:51:3c:7c:23:dd:3e:54:
                    0b:21:f0:d5:94:8c:15:e1:0b:da:6c:a9:62:04:9e:
                    af:8f:d5:97:bb:73:29:8c:12:14:21:e1:92:d9:da:
                    49:d2:a5:19:61:2f:be:fc:b4:ed:03:7c:fb:74:1d:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:DB:2B:9C:89:9F:C3:2F:DA:C9:E3:F5:91:4B:39:44:E6:B4:F0
            X509v3 Authority Key Identifier:
                keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ca:74:a2:02:86:6c:6b:f0:e2:33:13:57:7e:0e:2b:d1:3c:
         3d:e0:6d:a5:86:27:cb:33:db:09:99:8e:ed:2d:6b:c0:ae:8a:
         5c:28:39:25:a1:9f:50:21:32:9e:79:14:76:e6:2d:e0:b3:ec:
         d1:dc:05:42:5c:d8:81:f1:76:8c:2a:d3:e1:f8:af:8d:52:ac:
         dc:d8:56:e1:be:8c:1f:8f:c5:05:5b:57:38:cf:a6:5c:27:a8:
         e8:c6:db:f2:cf:01:a4:83:6f:e7:37:ae:bf:0d:d6:0d:e9:72:
         55:ca:ed:ec:5e:df:c0:de:28:67:97:a4:8c:89:62:68:4f:8c:
         97:2d:40:11:3a:ff:ab:72:6c:32:52:d9:cc:17:96:5a:23:c8:
         04:f5:35:5d:0b:04:d7:21:af:42:3e:99:60:6b:62:9b:b7:8b:
         fd:de:bb:99:d8:a7:fe:c8:78:f7:59:3c:ab:24:11:75:d8:96:
         59:32:70:a7:0f:62:1b:0c:31:f5:ba:0c:0f:38:2a:72:3b:96:
         13:75:5e:9f:5a:43:00:97:f9:22:1e:fc:70:4c:8d:f2:b3:33:
         b0:32:1e:55:97:58:ff:26:a6:05:db:35:dc:0c:e7:79:82:93:
         95:f9:9f:06:d6:7c:11:1a:f4:d7:75:aa:e1:25:5a:c1:ec:bf:
         83:d3:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----