Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File:                     9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier:          lUiE2AyD9n5ZhV5MMdAxB7Eb5ITp5svBtjSX9A+LbI8=
Subject key identifier:   64:8A:66:1C:38:DE:CC:BE:E3:BA:CD:97:EA:3A:20:AD:C2:1C:19:EC
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer:       /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial:       01962FAB146F726F92F97B3081F0287FFE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: Y433gDv+5mmWdDHIAb3wDeMJ1oSC74ZPjyzEWa3slqQ=)
                          2: BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa (hash: QzO5j9RPktNq5NXFjAY7mK7/e0HDOPdGV4+293fHloM=)
                          3: br5LvPAh3qC25uv5le-_vMirU9E.roa (hash: d5eKzHAQ2jh203ot8SX9ieqegHwAZyoAukOsm+PkxYo=)
                          4: keFbyWRx9CXFGktePoeob--QEYA.roa (hash: iRz71Y07r23FnbminnQhY3v7rzlViMoRNVr4WwEmWj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:14:6f:72:6f:92:f9:7b:30:81:f0:28:7f:fe:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=648a661c38deccbee3bacd97ea3a20adc21c19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:5f:0f:54:4f:49:f6:61:69:7d:c1:f4:0f:
                    be:60:ff:2d:87:d0:0c:4e:49:dd:b9:cc:54:7d:9d:
                    8e:5c:6b:9a:91:4e:ea:46:84:d0:58:e0:9a:a0:5a:
                    ae:51:7f:c9:96:6f:29:4b:1c:0c:fa:11:0b:d0:ae:
                    03:05:e2:26:02:df:20:ae:62:ac:4a:c6:dd:8a:61:
                    55:06:a2:6c:e2:84:41:3d:a6:c7:66:f3:de:a4:74:
                    09:ee:a9:f9:71:be:bc:6e:6e:d8:aa:55:89:77:01:
                    6d:62:27:56:0e:c7:5a:34:9f:0f:24:12:a8:57:f2:
                    23:d6:c4:14:f1:3f:09:15:db:dc:28:99:98:9f:45:
                    f3:06:97:5b:7c:a8:3f:d5:44:74:55:0f:49:3e:77:
                    75:00:d8:0e:45:99:63:33:a5:6d:33:94:1f:b7:78:
                    ac:85:34:6c:b5:f6:41:62:36:b8:7f:75:99:f7:cb:
                    78:5f:17:f9:91:74:84:e9:a5:9e:9f:7b:cc:a7:5f:
                    0a:33:0b:95:ef:23:29:59:41:88:7f:f4:9b:0b:0a:
                    eb:0f:2e:7a:7e:4d:5c:c4:b3:b0:d6:40:7a:f6:6d:
                    57:70:ed:95:f8:d1:f0:f9:d5:f5:72:b3:93:34:14:
                    29:35:04:0b:ef:5a:c1:33:31:e5:da:a2:19:ef:16:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8A:66:1C:38:DE:CC:BE:E3:BA:CD:97:EA:3A:20:AD:C2:1C:19:EC
            X509v3 Authority Key Identifier:
                keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:69:ee:94:cb:3c:a1:13:65:73:b8:29:a7:9f:f9:c2:ad:f3:
         a9:43:85:6e:b3:76:a1:ed:0c:5f:ed:26:ac:9a:e1:a4:9f:42:
         d6:da:36:5e:ad:9e:0a:97:3b:60:19:90:b5:d5:26:29:c7:e8:
         08:08:be:82:fc:90:b2:2a:3c:88:d7:66:9a:8a:c9:37:1a:4e:
         a2:f1:cd:d6:19:78:32:48:bd:87:93:6b:d8:c6:f7:5a:fe:b2:
         54:de:52:fa:b5:88:07:98:01:3a:e4:ee:b9:e2:ff:83:9b:bb:
         d7:32:f1:7d:62:ea:36:bc:d8:f3:d5:41:95:df:d1:c0:4d:a9:
         cd:c9:38:78:88:e5:60:12:ec:98:4b:34:9b:b5:45:2d:b0:fb:
         c3:07:24:c2:66:e0:7c:5d:40:b2:b6:bf:d2:76:76:72:bf:44:
         0f:13:c1:e0:1b:6d:d1:d5:b8:60:9f:0f:fe:4c:ea:dd:e9:e8:
         9d:9d:e4:43:47:cc:dd:01:fd:34:39:d5:49:bd:95:4b:da:cd:
         40:c3:b5:b8:3d:90:9e:23:fc:50:b3:51:4f:ba:fd:19:b9:5f:
         57:1e:52:72:93:fe:98:fb:47:58:2d:c5:55:ad:5b:72:45:20:
         f8:eb:3f:80:de:a8:df:c2:37:83:8d:42:c8:bc:d2:f7:9b:48:
         b1:98:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----