Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File:                     I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier:          JO1J6zkukOH5qXcVoXWOHROLhDfRWkulIBKdWYpoUVM=
Subject key identifier:   92:36:8D:43:3A:B2:82:D2:78:99:BE:DB:38:FC:A4:2E:53:DF:E0:7A
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer:       /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial:       01962E9881CF54B8639A1E82FFC9E789F930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: PYNLDdPl0HhgOFZATuLmXMWJRZ/jcOBvXVQIwKvReQM=)
                          2: LposyqjV73-zT4I-NkDoALIwk_k.roa (hash: OHnWiOPJ0+vl8RYqLw+3oMseEcMGYzbghowhWqyDjck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:81:cf:54:b8:63:9a:1e:82:ff:c9:e7:89:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=92368d433ab282d27899bedb38fca42e53dfe07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:5a:0a:65:0a:4f:48:fc:5a:c2:e2:47:c1:
                    eb:1b:05:48:60:7c:b2:28:9f:7d:ab:d0:e1:27:43:
                    c0:fd:c8:4a:e1:31:a4:2c:ab:fb:2c:fc:a7:91:ae:
                    1a:f4:fc:a1:0c:ba:fc:33:82:4b:68:55:d4:59:c7:
                    5f:82:e5:4f:e7:39:ff:ef:7e:8f:b3:35:28:a1:1d:
                    fc:7d:b4:da:7d:c7:68:67:4a:9c:c1:b4:7d:03:27:
                    3f:d2:fc:63:66:cd:41:72:df:04:4e:ed:2c:9c:07:
                    c6:a2:66:45:0b:c3:ee:6b:ba:a2:c4:c6:4c:53:a1:
                    0e:35:db:92:64:68:88:18:a0:3e:d3:32:99:d3:bf:
                    07:d4:23:8f:ba:d0:2d:87:1e:28:76:71:e0:c2:43:
                    15:8e:91:a9:7a:f2:ab:83:0c:40:7f:2f:0a:e4:83:
                    5e:76:28:08:52:ad:0e:3f:96:06:d7:a0:e8:65:f2:
                    36:0b:8c:16:12:34:c4:f7:61:4a:c3:a2:56:73:c5:
                    f7:c1:b3:67:75:c3:7f:51:64:bf:78:9b:2b:47:a9:
                    f9:46:73:30:7a:d6:d3:31:22:12:5e:4b:06:e8:99:
                    89:66:03:b7:64:9b:4a:41:23:c5:4a:cb:96:be:52:
                    4f:59:08:f8:f5:9b:a9:9a:78:d8:d1:d7:8f:d0:87:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:8D:43:3A:B2:82:D2:78:99:BE:DB:38:FC:A4:2E:53:DF:E0:7A
            X509v3 Authority Key Identifier:
                keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:74:b9:38:2d:a2:f8:43:50:95:33:5e:37:58:58:06:66:
         28:92:ee:af:bc:2e:e2:df:28:e5:ad:eb:01:a0:21:f1:07:1e:
         5e:ee:42:46:05:c9:ad:5e:e1:29:9b:15:63:d0:5e:f6:ff:e9:
         cd:e4:92:21:2c:5f:5d:65:b8:c8:6c:4d:e3:05:ad:a2:37:7d:
         82:ee:a6:0d:f9:ef:fa:28:5d:ab:17:50:4d:a1:b7:32:9c:18:
         3c:9f:3a:f6:19:f6:2a:c8:9e:35:4a:97:24:fb:07:65:e6:13:
         5e:05:f5:21:81:06:5d:e2:c4:e8:5b:b1:29:0c:27:ad:78:5f:
         77:8e:5c:16:e3:b7:59:f3:7c:eb:86:09:3a:c0:5e:0d:07:96:
         7d:7a:0a:de:f0:35:b9:1f:a4:f2:8d:d0:5f:f1:18:8e:37:21:
         13:81:fc:93:e6:6f:ac:06:6c:e2:65:eb:b1:e2:ed:f3:f8:5e:
         78:8e:93:17:e9:f9:2b:53:64:42:47:74:23:65:a8:4b:9c:3a:
         f2:9f:19:79:10:73:66:32:f5:c9:47:1b:99:f1:14:75:92:6e:
         0d:cb:69:a4:6d:b5:60:1a:96:5a:80:a7:7f:45:4a:58:4c:9f:
         dd:46:08:b0:d6:41:49:18:5c:88:7f:91:7e:74:f0:20:f0:fa:
         8f:8f:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----