Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File:                     mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier:          e+a0XaJN464uyVEWFApR1VUhUz9N4pH313s6eiwxV1k=
Subject key identifier:   A9:43:B3:1E:7B:E7:2B:D6:6C:B1:DD:1A:8D:43:F8:82:16:75:A1:CF
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer:       /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial:       01962DF3A2DEF714E39C8F6F87814A9E0C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
                          2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: Q4okT/CZ//84WNQNZR+kBnDdn0EoOP5UFs9oVUFeb54=)
                          3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a2:de:f7:14:e3:9c:8f:6f:87:81:4a:9e:0c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=a943b31e7be72bd66cb1dd1a8d43f8821675a1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:d0:fe:d6:1f:5f:e2:ca:ff:2c:31:1e:ad:
                    85:67:1a:27:0b:78:10:1d:45:af:d6:3f:d7:9b:a8:
                    93:55:0b:b5:fb:9e:1b:27:e3:20:50:7d:00:83:d0:
                    32:13:6e:e4:a6:ff:ee:4a:85:41:1b:4a:77:57:4d:
                    b4:7e:1f:04:74:81:e5:44:43:80:81:aa:51:b9:ec:
                    57:bb:ae:08:c9:82:49:52:f3:0a:a6:b7:84:01:00:
                    e6:fc:2e:8f:b3:0a:35:1d:e9:f1:d6:39:0d:f4:22:
                    a1:42:1b:23:9e:9e:1a:8b:5b:1d:d3:53:44:21:91:
                    9a:62:03:a6:f8:14:b5:96:da:5f:80:59:f6:29:28:
                    a2:a5:a2:55:19:4b:a9:f4:35:40:df:0c:09:57:13:
                    ae:96:41:ad:f2:67:7d:76:c9:ae:7a:79:2d:43:e4:
                    8c:79:47:70:91:b5:61:03:6f:01:1b:88:0e:de:5f:
                    08:e7:8b:03:c8:4c:01:69:a3:8f:4c:bd:40:ac:b2:
                    9e:27:0c:7d:75:7a:92:89:3b:3e:12:6a:29:8d:24:
                    08:c9:27:98:8e:38:f9:26:72:45:66:a0:46:15:5a:
                    29:16:99:89:81:aa:57:9b:a5:b0:b2:a6:f9:2c:5b:
                    40:52:a3:77:52:8e:42:f1:32:86:83:92:ee:49:29:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:B3:1E:7B:E7:2B:D6:6C:B1:DD:1A:8D:43:F8:82:16:75:A1:CF
            X509v3 Authority Key Identifier:
                keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:1e:b9:ae:0b:30:f8:ab:4d:13:1f:82:46:f0:96:53:52:
         cd:1b:e7:16:df:b0:12:89:50:1f:e3:87:93:c5:aa:29:df:64:
         6c:ff:41:20:69:bc:c2:0d:7e:8d:74:c9:27:d0:57:73:a3:c1:
         b7:f0:11:26:8e:1f:f7:59:98:28:53:27:ae:90:90:30:db:74:
         8b:82:c4:8e:f4:1e:5e:07:0e:5c:04:0c:9c:f3:cb:a2:46:2e:
         1e:14:80:1b:3e:15:78:40:bd:4f:c8:0e:95:22:1a:b2:09:25:
         8f:21:a5:ae:8f:11:c3:2d:84:3f:ed:ab:b3:d8:9b:7a:34:17:
         44:29:e4:94:4c:ce:e0:fe:01:78:4d:7f:bf:db:b5:e7:77:96:
         65:57:cf:18:ba:d6:c6:38:23:47:e8:50:14:78:32:33:e5:ea:
         db:df:8c:50:bd:ed:84:24:4e:c7:44:a3:85:07:5b:93:59:2b:
         c8:c0:2b:cb:39:00:67:38:ff:51:80:aa:e2:b3:37:6d:e5:b8:
         f2:97:96:54:78:28:55:ef:36:77:63:71:14:19:66:d4:61:0c:
         3d:4c:78:83:0a:86:07:7c:6c:e9:5f:61:c6:c3:fe:21:3f:12:
         0a:97:38:34:1e:ae:e5:fc:b9:81:1c:10:1a:5a:78:c8:4f:42:
         ca:8b:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----