Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
File:                     aIPzR-OJH1c9-AFa1swzHM6wR2g.mft (raw, json)
Hash identifier:          rZjm9ABtb3jqip8wr4i0BzWK8MQp2/EpfxViyiLcFw8=
Subject key identifier:   F9:00:24:28:CF:3C:87:26:E7:06:82:B8:5A:7F:0B:47:6F:25:AD:BB
Authority key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Certificate issuer:       /CN=6883f347e3891f573df8015ad6cc331cceb04768
Certificate serial:       01962ECF93B7E719448B3F23CC1686DE3E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
Manifest number:          0493
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: aIPzR-OJH1c9-AFa1swzHM6wR2g.crl (hash: gGM/3E490qw5df694zLffdWehufq8SLTdOsTEDko57A=)
                          2: yzwcVTa4_EkxmkA3zs7RU2L0KuA.roa (hash: DiSWwAw7nqN/ZHYKb36GWp0hrc3vDQ6bPbUIBdkwyko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:93:b7:e7:19:44:8b:3f:23:cc:16:86:de:3e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6883f347e3891f573df8015ad6cc331cceb04768
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=f9002428cf3c8726e70682b85a7f0b476f25adbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:d3:c4:ba:b8:94:b8:9c:f2:f6:dd:77:ef:
                    01:df:fd:a6:33:99:f7:d6:90:24:87:f9:4d:50:14:
                    be:b7:ee:8a:8e:e6:6c:05:78:33:32:eb:03:e3:98:
                    9b:78:b6:bb:7e:21:41:73:23:4d:3e:0f:e7:20:a3:
                    df:87:74:cc:db:19:76:41:dd:8c:5c:77:d2:7e:c6:
                    9c:38:16:1c:67:cb:fc:10:66:93:64:bb:5a:ca:63:
                    6a:ae:1c:ac:18:3f:ee:71:a1:ae:cb:fd:90:1a:63:
                    47:81:f1:a4:04:5e:43:7b:68:98:eb:cd:16:51:e8:
                    24:83:b2:8a:28:86:81:26:94:cd:35:e7:dc:29:8d:
                    78:39:d7:c2:38:7e:c0:93:4d:7e:ef:22:67:ce:9e:
                    a1:9c:95:cd:26:60:01:86:53:d5:d9:13:7a:f5:42:
                    b6:5c:7c:80:67:39:dd:58:41:47:a1:a7:c7:c3:61:
                    65:8f:f9:09:e9:43:c5:7c:fb:ee:52:3d:9b:75:a9:
                    60:21:c2:75:6d:96:4a:a5:d9:60:34:55:03:91:48:
                    6b:82:40:df:bc:6d:0a:06:4e:cf:91:3e:b0:cc:fc:
                    a0:eb:22:c4:67:59:4b:4e:61:0c:ea:a5:f0:4e:f6:
                    96:30:0f:9f:c2:da:2c:35:ef:7c:53:e6:f0:5b:a4:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:24:28:CF:3C:87:26:E7:06:82:B8:5A:7F:0B:47:6F:25:AD:BB
            X509v3 Authority Key Identifier:
                keyid:68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:ab:fc:bd:44:70:36:6a:bc:29:23:59:3d:8a:46:57:ed:
         a1:88:7c:9e:79:86:f0:f8:8e:21:ad:e0:2a:c4:3e:74:d1:9a:
         92:57:97:1a:03:3f:29:b7:0e:1e:ae:a3:a0:3d:ff:32:77:66:
         eb:bd:90:95:6f:77:6e:0a:50:80:ac:48:9f:f0:3d:2c:8a:c8:
         bd:d8:18:95:c0:02:8a:8b:b0:93:9c:6d:81:1f:1e:a1:f8:04:
         d1:da:1a:fc:87:d5:a3:2b:f5:46:98:29:41:f2:5e:8f:90:4d:
         d3:43:98:0b:2f:ce:93:a2:de:07:50:cc:99:e0:65:1a:a1:74:
         be:d3:ee:2d:d6:6a:de:eb:78:79:9d:56:90:1b:74:44:b4:c3:
         9c:16:b6:e2:e7:04:44:1c:35:9f:bc:54:90:78:6d:30:f1:15:
         9b:89:21:7f:bb:4b:86:57:ff:8a:a8:66:66:ed:12:98:a6:aa:
         10:e0:4c:3a:fe:87:da:78:ce:0a:9d:e6:a6:4b:13:7c:67:fe:
         7a:55:89:26:4c:9d:9f:01:4e:a0:1b:2d:86:dc:84:04:6f:a8:
         d0:8d:cd:09:c7:a7:2b:9f:9e:a4:c5:86:cb:48:f4:38:29:84:
         64:a8:f5:bd:78:84:30:6b:02:ba:fc:4d:be:c6:1e:c0:a6:e9:
         ac:7d:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----