Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File:                     m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier:          fIqlZBrW2Iul7B/WS3lmshdyGARAjEoIgYLO02/MowA=
Subject key identifier:   A2:DF:49:11:D0:44:7A:53:6C:C8:CF:77:52:6E:F1:11:9C:71:D8:A6
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer:       /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial:       01962FAB8AA6261BC714223F65FC992378B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: B1YWoRijXzYkeoNgVdxAmYM6wtpeP2Vd8W7+EmO2l6g=)
                          2: q2ym0slk0xbm2oB654qSKIP-iHM.roa (hash: T79hvxao/FCQThpWza9B8knVI82t4LDRrMr2rSD4Axs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:a6:26:1b:c7:14:22:3f:65:fc:99:23:78:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=a2df4911d0447a536cc8cf77526ef1119c71d8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:7b:f6:64:22:ef:5d:b7:b4:34:49:36:d2:
                    ec:c4:70:15:ec:49:ad:1e:6f:ca:5d:5d:e3:50:18:
                    0d:db:04:97:0d:7b:ca:e2:17:2b:3d:0b:2c:c1:8d:
                    fa:2f:49:9e:9b:4e:8f:a2:4b:1c:b7:03:72:6c:45:
                    6c:98:3b:b3:99:e3:84:75:3f:81:47:48:9f:e6:bc:
                    9e:c9:8c:32:62:81:eb:f4:d9:04:8a:fa:73:82:f5:
                    18:d8:f4:84:f0:bf:d9:1b:5d:f7:4e:77:85:4d:19:
                    71:16:1a:9e:e0:ed:f1:0a:36:fc:60:d8:3d:43:bf:
                    36:0e:94:dc:59:6f:50:48:18:b4:f3:96:33:df:0b:
                    87:1f:82:c1:2c:44:52:3d:f5:cf:ac:00:b6:0a:00:
                    86:bc:7e:9a:93:1a:33:1c:98:0a:a0:83:d0:67:fc:
                    94:18:1e:65:ff:8e:e4:bf:85:44:be:4f:65:87:da:
                    22:4b:dc:be:a9:52:b7:6c:cb:d8:93:45:93:8b:df:
                    15:24:a6:39:84:70:8a:57:35:89:ca:00:ef:9d:af:
                    8c:91:c2:52:2d:f9:88:d2:31:b6:b8:a4:d2:4a:90:
                    7c:e8:a4:94:d8:ad:00:4a:25:8a:fd:62:f4:0f:5b:
                    16:59:be:b4:ff:58:59:d6:bc:ac:8c:df:0f:a6:31:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DF:49:11:D0:44:7A:53:6C:C8:CF:77:52:6E:F1:11:9C:71:D8:A6
            X509v3 Authority Key Identifier:
                keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:8c:d7:cc:f6:fa:2b:4e:fa:fd:49:9a:26:6e:cb:ed:28:
         fc:f0:fd:78:89:49:54:35:dc:23:5e:f6:26:2c:be:d4:c3:d2:
         c3:cb:66:28:8c:6a:88:eb:3a:13:84:7a:13:c0:15:5c:6b:e0:
         d5:0c:97:17:32:0b:9b:c6:ec:29:a8:69:e8:77:e8:a1:36:47:
         11:64:bf:be:e0:08:2d:25:98:5a:0e:bd:7a:17:86:db:c9:11:
         be:9b:64:29:78:c9:f2:73:3c:65:cb:3b:b2:90:7f:a7:f0:88:
         14:15:1d:0b:14:01:27:ba:64:82:87:bf:6b:ac:9f:5f:d3:1d:
         56:53:19:17:bf:42:d1:3b:b0:b1:a4:9d:cd:ea:4d:d9:36:43:
         9d:ea:90:f0:74:20:8c:c3:f7:42:7a:0b:67:cc:bc:d2:d4:1e:
         dd:11:e6:68:e4:e9:15:52:bb:c2:82:b0:28:d8:a6:bb:a9:b4:
         09:08:57:c1:10:f2:57:dc:0a:8b:13:8c:91:46:2a:e4:f4:5e:
         e6:b7:04:9c:7e:10:dc:5b:e0:75:32:d2:6a:a6:65:d6:66:82:
         8c:9a:49:3f:26:be:d7:75:6d:12:8f:4d:16:c1:fb:f9:78:5a:
         40:1c:64:78:d1:fa:3b:ba:23:8e:c8:b0:b4:79:c9:12:e1:cf:
         1f:09:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----