Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File:                     9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier:          ZlcvGXajvXRztqkLzrTwm0SXMZhnaHPB1xoWQiAQFdE=
Subject key identifier:   56:0E:41:22:70:18:3C:97:44:9C:3C:5D:C4:37:A9:BC:04:B7:AF:C4
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer:       /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial:       01962ECFCD154B8966498021093FA07248BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number:          06D6
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: QcrX6hqebxxAcncv2Umu4r7d3elFxuvsdyS6KhpX8gc=)
                          2: MP9C5tlE4sTN1JTDz4jlrkAW_YU.roa (hash: 2Qb7MzrDpByF3hW1GYmCH1FHWyuhYVmQ2YbJ0M55AAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:15:4b:89:66:49:80:21:09:3f:a0:72:48:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=560e412270183c97449c3c5dc437a9bc04b7afc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:9d:da:f9:5c:05:0c:89:89:cd:4e:fb:fc:
                    d5:f0:21:1b:43:f1:5c:8b:30:e5:ee:f5:80:bc:d1:
                    c1:6b:a7:90:f4:10:07:2d:d3:61:b3:62:85:1c:b1:
                    de:5f:07:4e:35:18:0c:c1:c3:56:29:1c:ed:81:60:
                    69:66:66:b0:04:57:70:30:60:13:ba:5a:b8:93:b8:
                    19:94:4e:53:db:98:2d:f3:90:b3:e9:9a:49:b1:97:
                    b3:ba:c2:f2:89:e2:f2:e1:c9:86:18:f8:bb:77:2a:
                    b7:8a:bd:07:42:53:5c:2e:55:e6:9d:1c:59:88:db:
                    86:fa:8a:89:c8:60:df:cc:4e:7a:04:6e:6d:d8:67:
                    95:18:46:eb:5a:e4:07:c7:ab:c2:66:ff:c8:57:6c:
                    df:9f:ed:67:d6:af:78:74:34:ea:3a:b4:03:b7:d1:
                    c8:16:be:46:7b:8e:a0:50:72:72:aa:90:d2:cf:99:
                    1c:da:f1:d7:dc:da:07:8e:4b:22:b4:f8:75:f8:b4:
                    e8:be:78:bf:ca:08:c8:7b:70:2e:d4:ae:12:cb:99:
                    98:97:e9:be:08:47:4b:39:00:84:f1:57:16:66:d4:
                    14:a1:d5:d3:aa:9d:b5:1f:fc:93:45:b0:11:a7:da:
                    a1:aa:bf:4c:63:8e:b2:f5:6f:9b:32:8d:59:1b:50:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:41:22:70:18:3C:97:44:9C:3C:5D:C4:37:A9:BC:04:B7:AF:C4
            X509v3 Authority Key Identifier:
                keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:35:9c:53:7f:37:88:3e:37:c3:de:8b:f7:a6:67:c8:1f:
         56:55:ff:bc:8e:98:d9:b4:79:1a:b4:eb:1d:71:b8:a4:86:c6:
         c2:ec:e2:d8:e0:35:71:04:9e:49:d0:f5:5a:bb:60:03:41:84:
         ce:48:92:e1:7f:7e:97:48:8f:0c:48:cb:ce:14:8b:0e:dc:6a:
         cc:1c:c4:ad:d3:fc:f1:72:b6:70:78:f0:9b:94:f8:f0:b3:2b:
         8e:fc:bc:d8:83:b4:16:03:c3:e1:a3:0c:e9:8f:61:80:ea:27:
         e1:58:d7:ed:f9:92:9b:8b:7d:7c:cd:73:1b:29:5a:7b:e2:eb:
         48:66:cc:df:46:96:87:ec:2e:19:43:47:fa:06:e3:11:cc:16:
         c7:2a:a9:69:a7:b7:44:e2:ff:92:e5:c7:09:9c:fa:89:9b:7a:
         0b:99:50:c4:3d:4c:e3:f3:ce:36:c0:f1:87:3f:e4:28:31:f3:
         fa:de:f0:1e:81:fa:25:a4:06:e5:ac:d5:85:c4:e3:b2:40:cd:
         29:d6:e7:47:f6:d0:69:0e:02:65:72:98:8c:a4:0a:b8:87:90:
         8b:a9:c2:4c:f6:9b:72:a6:59:d1:3a:24:0b:85:81:f0:34:e8:
         8d:12:13:50:56:5d:91:15:f1:26:38:90:57:1d:09:04:b9:ee:
         ce:75:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----