Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File:                     Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier:          /KF3Ve7lOXSqYymomQFXZadfvppHY72SqiT89jaBsWE=
Subject key identifier:   F4:F2:B4:44:7D:0E:5D:72:0B:79:00:CA:1A:8B:41:48:FA:2F:A9:B2
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer:       /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial:       01962E2B42A6CA5A1CB330138CA57F45BC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number:          0968
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: WQxLP+HoE8Fwa2cfYiYL8BlPNBWMKHGdUVQnnOPrqsA=)
                          2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:a6:ca:5a:1c:b3:30:13:8c:a5:7f:45:bc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=f4f2b4447d0e5d720b7900ca1a8b4148fa2fa9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:2f:35:45:7f:35:48:3f:42:c2:c2:1f:0c:
                    fa:b9:a1:cc:f6:ce:3a:9b:2b:38:68:71:d9:b9:59:
                    2c:dc:86:f0:2b:61:7b:2d:ef:b9:a5:a2:7b:8b:c9:
                    66:22:57:5d:e6:c1:e9:d5:91:6b:52:fb:d6:cc:b5:
                    d7:cf:f7:b7:aa:9c:5d:5d:f5:93:3b:b5:35:9b:6f:
                    3d:11:2d:5b:d9:e9:dc:e5:a5:fd:a1:56:b7:e1:9e:
                    d7:bb:0b:b2:40:cc:42:df:01:52:44:5b:53:d6:5b:
                    25:d7:2a:9d:63:5f:81:91:28:29:07:eb:02:a8:8d:
                    78:9f:65:7a:41:67:bc:08:e7:71:71:c9:85:bf:c1:
                    f6:e4:6a:31:d0:91:5f:87:59:28:35:da:b9:4f:50:
                    8b:b7:36:0b:70:a6:46:39:dd:f1:13:f5:c6:c2:07:
                    85:e6:7b:b7:52:58:52:71:f8:d4:a3:78:39:b0:50:
                    0a:c7:a2:40:b9:ae:55:25:30:cd:0c:fc:32:32:f0:
                    75:c2:2f:dc:49:49:5a:45:f7:7f:f8:8a:f0:a7:b7:
                    54:aa:4a:e1:d3:5e:93:77:83:86:a8:bf:8a:61:1c:
                    08:8a:f8:4a:8e:af:f4:ee:96:95:ad:f5:32:f6:16:
                    be:03:9a:3d:23:89:9b:b6:98:86:e3:be:37:4d:1c:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F2:B4:44:7D:0E:5D:72:0B:79:00:CA:1A:8B:41:48:FA:2F:A9:B2
            X509v3 Authority Key Identifier:
                keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cf:52:73:35:89:9c:21:10:d8:0a:82:e3:04:1d:65:cf:1d:
         24:97:fd:d2:40:70:b2:50:72:cf:52:80:5a:99:cc:5a:13:1a:
         55:bb:02:a6:6e:33:b4:a0:06:44:e5:0d:7e:98:77:e8:68:83:
         52:f3:07:10:d9:13:d5:0f:31:ba:fd:da:30:73:fc:59:4c:12:
         43:b6:8b:53:2b:38:32:e8:3c:3b:a9:d9:41:8d:63:26:a1:3a:
         94:3f:2f:35:3d:d9:b3:5a:3c:8b:24:b6:64:c5:f7:f1:07:73:
         53:d0:7e:7e:fb:46:6f:cd:c7:e8:53:2a:ff:f4:43:fa:32:83:
         3f:2a:15:7b:c8:b2:bf:88:88:8c:cd:33:62:29:8c:6e:cd:aa:
         28:06:90:d8:b4:e5:aa:43:cd:37:0b:11:22:0c:11:05:19:bf:
         fa:2e:a3:29:b2:ba:ee:b0:86:1c:57:f7:1a:30:4e:d5:2f:e9:
         1d:88:00:c5:55:90:8f:23:7b:8f:eb:1a:52:0e:95:3b:6b:9b:
         c6:a0:ef:e9:66:be:8e:ef:56:3e:23:31:78:dd:a1:e6:48:86:
         bb:80:97:5b:43:ed:65:f8:31:05:91:33:b8:e6:84:ad:85:dd:
         7e:03:72:be:74:87:b7:f5:33:7d:aa:21:f5:db:ed:e6:8c:c5:
         a2:68:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----