Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          Xw4maVkSGHoTDz+ANV0u6TcyFAyA32rV9jHw2oDUXK8=
Subject key identifier:   D7:C0:8B:63:CA:DA:67:F2:64:A6:F0:6E:72:7C:55:A8:F6:20:0A:D4
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       01962ECF7CBAD27B3BB96E60635881535387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=)
                          2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=)
                          3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: +B8xO2w3etV2caM9iT092dnlV9POLLLTNduVUJilr8s=)
                          4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=)
                          5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:ba:d2:7b:3b:b9:6e:60:63:58:81:53:53:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=d7c08b63cada67f264a6f06e727c55a8f6200ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:9e:19:f6:75:2a:8f:9c:08:e8:80:f5:fb:
                    ab:55:3d:62:24:f9:00:a7:71:fc:c6:00:ca:58:7e:
                    8f:ef:43:71:b3:7f:6f:f9:cc:33:1b:27:c9:1f:3c:
                    a4:26:d8:1b:2a:27:93:1d:4b:32:25:14:4e:35:e5:
                    a0:9d:78:9d:08:96:df:7b:c3:95:a1:c5:0d:78:c3:
                    39:a7:b6:5a:7c:a5:43:08:9d:cb:d4:18:65:d4:c1:
                    b7:09:51:6b:ae:31:b5:09:f6:5a:c7:3e:8e:91:4b:
                    bd:1f:39:27:20:03:a5:18:8b:23:03:65:56:c2:a0:
                    91:ce:39:6a:17:9b:49:22:6d:5b:35:78:16:68:70:
                    fb:0a:2e:e2:67:92:c4:17:86:8c:26:b7:f1:f4:65:
                    6f:0e:6f:88:77:9f:c0:1b:f8:1f:1b:3c:37:9f:a5:
                    21:06:12:75:86:ad:88:9c:8b:06:cf:3c:ea:ab:c2:
                    97:d3:9e:a5:f5:7f:db:c7:fb:f5:a6:e6:3a:4b:06:
                    6f:6a:6e:c0:b0:98:52:31:26:2f:34:c2:49:8f:f7:
                    6c:c0:2a:d1:f9:59:4c:86:f1:bb:6f:dd:f2:a0:d4:
                    82:63:b3:79:a6:98:78:7d:bd:03:2e:4c:a8:2c:dd:
                    85:ae:95:0f:57:b9:f3:54:9a:95:b3:0a:57:88:c1:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C0:8B:63:CA:DA:67:F2:64:A6:F0:6E:72:7C:55:A8:F6:20:0A:D4
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:46:76:79:12:21:c0:8b:ef:cb:c6:da:97:cf:a1:45:44:bd:
         c3:ac:0e:a8:2f:a0:97:d9:68:b2:9c:a0:c0:48:71:50:ca:37:
         3e:61:0c:25:74:48:44:8a:fe:e9:b6:fc:e2:f6:f6:4a:e1:a9:
         c9:54:f1:27:f4:6f:d1:08:78:3c:a4:82:f3:7b:5a:3a:c3:b8:
         16:d3:b9:a7:20:b3:8b:89:7a:b4:aa:ac:fb:24:18:a5:fe:24:
         d3:b8:dd:80:7d:5d:85:ae:a9:05:a9:8d:8a:b3:88:bb:6f:c8:
         95:59:98:63:5d:47:11:1f:76:14:07:b4:7b:d6:5d:d2:1d:08:
         bc:58:63:4a:dc:cc:af:f3:0d:c1:d9:a4:19:d2:15:27:97:53:
         34:9f:2f:2a:45:8e:8f:04:77:ba:91:86:9e:81:86:7f:9a:d2:
         87:41:36:4d:41:99:a2:d9:d8:58:57:90:d0:b8:d8:18:22:96:
         2b:8e:8b:cc:67:0d:0b:58:cd:8d:96:48:61:a7:14:f7:ab:b0:
         42:8d:29:be:88:3b:33:b0:b9:48:c3:97:46:62:16:a8:6c:eb:
         be:79:58:6a:3c:dc:f4:6e:14:0a:c4:b9:fc:59:fb:d7:1a:fe:
         c2:39:f6:98:4b:4a:de:ca:7f:a0:f7:df:a7:68:6e:5e:7b:c2:
         f5:bd:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----