Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File:                     9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier:          ZwtomQ+n755yWelHqOJt51SmV1z0YQu9KNDVljE3+4s=
Subject key identifier:   DD:C3:71:BD:A4:13:3D:BF:F8:D5:D2:7B:B2:8C:7F:23:0E:86:B7:B4
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer:       /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial:       01962ECFE4010450F14A2E9519BBDA1B849D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: JkFYJtq5clrman1AIoXdg3PibEjjnLS/98q0Jv8Wm/Q=)
                          2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e4:01:04:50:f1:4a:2e:95:19:bb:da:1b:84:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=ddc371bda4133dbff8d5d27bb28c7f230e86b7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:21:be:09:1f:97:08:61:af:99:8a:8f:8c:
                    cb:75:ae:87:05:d5:c2:c4:b4:25:43:f3:1b:e1:36:
                    50:33:d8:d2:4c:97:4f:8e:d7:2d:a3:2c:6d:af:00:
                    b0:72:65:f2:60:ce:c2:59:86:2d:73:85:43:38:04:
                    59:b9:05:57:3e:8d:0b:61:2d:19:95:c8:ad:38:05:
                    16:b4:a6:98:4a:e0:7d:ba:78:df:8a:23:0c:b5:3a:
                    70:1b:57:68:95:2d:8e:e3:e2:d1:ea:e8:a4:b7:26:
                    21:20:b1:ae:b4:7f:66:6a:39:0d:7a:03:f0:b9:a2:
                    a0:ec:4a:4a:a6:c5:c1:76:d8:0d:8e:38:00:23:db:
                    b2:2e:d2:61:38:f0:9c:f1:96:09:f2:b3:a7:dc:68:
                    71:00:bf:f4:66:d6:b6:ef:c2:13:53:56:54:95:4b:
                    24:e3:3f:94:8b:2a:61:50:af:c3:cf:48:04:53:79:
                    00:0d:23:02:c2:9b:b1:04:c3:b5:94:c5:82:a4:4a:
                    56:16:ab:06:48:4f:f1:58:8d:67:c0:3a:d7:a4:67:
                    14:3d:61:e6:6d:55:94:18:19:cf:fd:cd:20:dd:3a:
                    db:b6:89:30:bd:ea:f7:24:9c:b6:0f:bf:b5:5d:4f:
                    29:2a:dc:35:da:1d:d6:0f:80:41:5d:b1:87:2a:11:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:71:BD:A4:13:3D:BF:F8:D5:D2:7B:B2:8C:7F:23:0E:86:B7:B4
            X509v3 Authority Key Identifier:
                keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fd:b1:6a:56:fc:31:b2:11:53:d8:b7:f3:df:5b:e3:1d:5e:
         be:ee:57:f1:a0:03:27:9a:8c:a8:b0:ac:be:62:64:76:bd:0b:
         2f:60:75:34:87:6a:ab:93:b0:62:a6:55:40:a9:6d:9e:c1:95:
         75:51:90:86:7f:92:ff:dc:a4:6f:06:04:dc:2a:41:05:cb:e4:
         5c:ff:81:7c:97:81:39:65:63:9a:92:c3:b9:83:20:f4:84:84:
         a9:f7:e1:ab:fa:68:45:40:63:65:a6:a6:3f:90:04:b8:b3:ed:
         0b:65:02:08:2e:20:5b:ea:7e:7d:8a:3e:76:a5:3e:30:7f:76:
         26:85:11:49:63:41:03:75:bd:23:38:27:b6:b4:a1:87:17:76:
         84:f4:62:ae:32:64:a0:e7:37:13:9e:13:92:23:95:60:80:72:
         a0:2d:f6:4c:49:b6:89:a8:93:a5:89:54:2e:54:37:5f:1c:49:
         2c:e2:d7:e0:f8:26:17:73:20:29:d6:aa:fb:22:3d:fb:9c:e4:
         f4:05:3c:6b:a0:f9:58:63:63:24:d8:b6:92:77:3e:e8:91:f3:
         b5:e7:0c:11:6b:a1:bf:79:2c:f2:a4:5d:df:4e:b6:6e:a3:28:
         41:b1:d2:36:9f:4e:46:4f:ca:02:72:95:a1:0a:ad:02:5d:d5:
         ca:f8:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----