Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File:                     Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier:          0YDonWUdPidNI8kxCJwK8BW+XCI7kDncoZUp9vKRxzk=
Subject key identifier:   B6:4A:86:33:FF:AB:34:0A:0B:24:70:16:F1:22:0B:BB:FA:9F:E2:09
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer:       /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial:       01962F0645932E322E0A0780280EFC9645A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
                          2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: XPIkyHh5vSn9XG0ZMhdpjsyR5UQAWBu8M3QaepePaso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:45:93:2e:32:2e:0a:07:80:28:0e:fc:96:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=b64a8633ffab340a0b247016f1220bbbfa9fe209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:36:31:62:2d:20:f1:37:3a:d1:e7:53:d9:
                    5a:91:8b:d1:63:cc:8e:b1:8b:fd:72:26:2b:9c:ee:
                    99:b6:26:88:1e:f4:d1:1d:e1:14:f2:3e:41:26:cd:
                    00:17:70:82:66:c1:a9:1f:02:57:26:17:f9:7d:fc:
                    6a:e6:27:1a:f2:91:fc:7d:01:18:bc:7a:5a:b8:06:
                    11:64:84:e5:44:ba:63:1c:78:97:e9:f9:c1:18:25:
                    14:81:0b:b7:7e:74:9a:c5:f2:38:68:58:e4:bd:ce:
                    8c:b5:04:7e:06:24:18:10:d6:24:c4:fd:63:b1:6a:
                    3a:a5:8e:11:e8:ac:1a:99:d3:c2:2c:a2:59:a0:74:
                    92:a0:5e:9e:f2:b8:96:4d:70:11:2d:d5:9c:d0:6e:
                    96:d5:4a:95:1f:53:df:40:64:db:58:44:f4:cc:ea:
                    f5:e8:02:67:57:ce:0b:7b:79:d0:64:99:b8:b2:8b:
                    a9:28:e8:c8:cf:ce:ee:ee:51:39:f2:1e:97:7c:1a:
                    e5:48:11:f7:31:16:7c:49:61:07:2f:9e:54:3a:21:
                    cf:ff:95:e7:d0:f8:8a:96:20:0c:13:bf:7c:1b:d2:
                    b5:60:e5:b8:50:90:fd:3e:f9:8d:4f:f7:54:3b:ae:
                    20:0b:a7:a9:06:65:92:48:b5:b6:37:ca:45:d3:dd:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4A:86:33:FF:AB:34:0A:0B:24:70:16:F1:22:0B:BB:FA:9F:E2:09
            X509v3 Authority Key Identifier:
                keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c9:49:af:59:b0:8a:cd:4b:73:fd:db:80:6e:d3:b9:df:53:
         3a:ea:0d:76:e1:97:55:a0:3a:30:ad:7f:87:78:94:0b:ea:88:
         4d:17:f1:1c:43:27:22:8e:c9:be:f2:d2:d3:95:3c:f8:1a:9e:
         87:b0:04:4c:23:f7:e0:91:a6:dc:c4:04:26:cd:39:12:67:65:
         22:c5:21:cf:59:9e:f0:d5:07:50:7d:fd:dd:21:c9:ba:ed:de:
         37:7f:6b:27:43:87:66:f2:6b:e3:8f:32:a4:b5:45:2e:5c:2b:
         e1:fe:d5:e1:4e:3b:65:14:52:fe:a8:ce:eb:ee:f9:36:6c:f3:
         17:38:34:7e:0d:07:cd:8d:82:ce:1c:b9:25:3b:2e:44:76:c0:
         f1:6c:0a:74:04:ab:b7:26:9d:35:1a:26:a3:12:50:df:67:e4:
         54:44:f2:17:36:81:a9:19:a1:f1:bc:58:82:6a:56:e5:1b:52:
         f1:c4:76:87:ed:f3:fa:09:b9:6c:c8:f9:4f:61:82:31:f0:b5:
         a3:7c:6a:7c:ac:70:6f:9d:67:be:3d:c4:a9:b7:97:df:eb:83:
         ae:91:1a:e8:d6:64:c1:7f:d3:07:de:6b:39:c3:76:c6:44:1a:
         dd:a3:3d:2d:79:29:50:ea:09:71:a6:1a:57:2e:d1:c0:8c:4e:
         0d:fc:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----