Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File:                     1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier:          ar1JjA2bZysK5UAG+uH6lv1dRxEK5DTU1/HvtHWuN40=
Subject key identifier:   49:C4:9D:81:01:C2:C1:67:B7:16:B4:52:DC:40:59:45:27:36:C9:93
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer:       /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial:       01962F748E4962470B40884B4DC121366D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: k5S011uo1F62tBWwNx7E8eJaMVghn9Q2F1jFdDh0xsI=)
                          2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:49:62:47:0b:40:88:4b:4d:c1:21:36:6d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=49c49d8101c2c167b716b452dc4059452736c993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:b4:5f:1f:58:7c:1e:f9:f3:43:b4:d6:76:
                    d4:a8:c4:43:70:04:21:c5:a6:57:71:ff:11:86:e1:
                    40:d4:8a:4f:ce:1e:a0:d7:51:62:41:f8:cf:19:5d:
                    22:9d:4e:1a:19:6c:46:50:1b:3d:a1:2b:39:52:5d:
                    c3:2a:61:00:63:42:77:88:06:c3:d1:82:fe:3a:49:
                    9d:83:6e:74:ce:e4:66:ca:fa:3d:38:74:91:f7:77:
                    7a:7c:53:7c:bd:20:20:74:3d:8a:2b:21:0c:92:64:
                    e8:f2:1e:de:c2:48:9f:8e:fb:46:0a:c8:30:bc:f0:
                    00:95:bd:51:8c:ca:cf:c4:9b:c6:89:b3:9c:8e:7c:
                    be:ed:dc:71:87:19:ed:c3:00:b2:40:12:68:7e:3a:
                    f7:dd:7f:ff:f3:37:bf:48:05:ee:08:90:90:de:5a:
                    04:32:2b:94:47:08:70:3b:a2:8c:8c:86:46:3d:e7:
                    26:57:b7:63:25:fe:0a:3b:0b:a2:7e:68:dc:5c:b8:
                    4c:b1:31:c9:90:40:4b:76:7a:a0:8e:ee:9b:c5:71:
                    f7:a9:8b:74:b0:ad:c9:4b:b8:37:40:ec:a3:fc:a3:
                    2e:b1:c7:54:a1:c7:b0:c4:30:5f:37:ce:be:12:6e:
                    65:41:4a:41:62:10:f4:2f:09:64:76:34:15:5b:0a:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:9D:81:01:C2:C1:67:B7:16:B4:52:DC:40:59:45:27:36:C9:93
            X509v3 Authority Key Identifier:
                keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:89:16:00:c8:a3:10:4e:dd:3a:80:5b:a4:df:30:ba:ec:06:
         41:ea:bd:2c:9c:20:16:b4:7d:93:87:a2:5c:c4:6f:c1:1b:1e:
         99:5c:b4:cb:ec:22:c9:69:4f:b2:94:5e:71:02:88:8d:ad:9e:
         f6:e1:6d:71:1a:34:1f:d3:6f:7f:fe:bc:f6:f2:69:dd:4c:eb:
         bd:23:01:75:fa:17:2e:2f:5e:3c:41:5d:69:66:0c:41:49:3c:
         40:7e:c7:8e:80:3f:e0:cd:85:a4:df:2c:22:96:bf:1a:5d:8e:
         b1:e2:0f:50:5b:4a:12:cf:a5:9c:0d:ce:86:6f:92:25:ab:35:
         b9:29:c9:f4:e8:9d:80:f0:09:35:4d:f5:53:d3:8a:ca:27:47:
         e9:46:fa:03:b6:d3:86:ef:3c:82:c1:42:e6:06:29:a1:f2:45:
         f0:ae:28:93:be:e5:9e:82:85:6d:bc:a9:5d:87:65:21:4e:7c:
         fd:4f:7c:fb:24:7e:93:d7:ec:d0:b5:9d:f6:0c:87:8b:57:b2:
         2c:4c:b1:f7:09:f6:89:8c:de:d3:92:dc:b4:94:86:08:99:b1:
         b3:ba:17:1c:8d:a8:6f:da:d0:a8:da:5b:1c:ce:44:46:9d:af:
         9b:77:0d:7b:16:6d:7b:21:36:f6:f0:a0:a5:cc:80:3e:7c:a9:
         69:53:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----