Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File:                     A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier:          tSn1OnymvHgr/2yHgfBjjBdNrwEO2PUlnnFH9IEywRY=
Subject key identifier:   1D:76:37:FB:F9:D5:47:69:AE:5C:AF:1E:97:03:34:37:FC:63:6F:53
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer:       /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial:       01962E986CC3F54B66B7ED188353664DF634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number:          08FE
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
                          2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: UOziqzv8TWqpuvKaFOUzTshSuMZljYHkShCjIFQ34NI=)
                          3: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (hash: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=)
                          4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6c:c3:f5:4b:66:b7:ed:18:83:53:66:4d:f6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=1d7637fbf9d54769ae5caf1e97033437fc636f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:3f:32:16:17:43:6e:52:3f:ae:92:fa:e1:
                    b0:4b:ce:74:c2:43:02:19:f5:f4:74:a8:70:62:54:
                    e6:f2:cf:4c:3d:76:77:79:75:30:3e:8e:ea:ba:15:
                    96:f6:7e:62:48:3f:11:73:39:fa:e3:5b:99:95:60:
                    5a:5f:09:cb:c6:f2:a2:60:e5:42:ea:95:86:05:bc:
                    3a:9d:d0:82:dc:e7:d6:31:f4:87:fd:0a:3c:f7:6f:
                    f4:c2:68:ee:03:6a:61:35:fc:8f:5e:16:4b:b3:31:
                    d3:c5:b2:f7:18:d0:64:75:bd:e1:bc:0e:77:2c:31:
                    1b:72:cb:fd:af:5d:b6:22:f2:0b:61:2e:40:f7:c4:
                    7f:41:c8:38:06:9e:5a:33:8f:ab:10:c2:e6:1a:04:
                    fa:e0:99:a3:1a:a6:e2:6f:4b:87:8f:6f:bc:15:69:
                    2c:2d:10:6d:30:6d:14:e5:cc:fa:57:20:db:13:0c:
                    95:1e:4c:cc:3c:64:87:a4:45:ac:a7:bb:8d:82:5d:
                    92:d8:e4:3b:da:5b:b4:6f:ce:23:fa:98:a7:89:d0:
                    c6:28:6f:23:d9:7a:70:5a:ed:00:11:75:08:98:52:
                    76:1c:39:c4:a3:d3:53:0f:8e:3f:69:23:4e:36:46:
                    cf:7e:92:91:36:5f:53:d2:e8:0e:e8:87:1a:40:54:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:76:37:FB:F9:D5:47:69:AE:5C:AF:1E:97:03:34:37:FC:63:6F:53
            X509v3 Authority Key Identifier:
                keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:ad:31:d9:6e:69:04:75:43:ba:4b:76:fc:46:01:2e:bb:
         65:03:bd:cc:29:6c:32:e3:ea:90:45:b1:14:a7:c2:4e:79:c5:
         c3:10:93:3c:5d:5b:c2:3f:49:d9:fb:b8:ab:2b:c1:3d:f3:73:
         cf:f8:b8:ba:03:05:b8:8a:22:a5:f1:21:f0:94:4c:9d:f4:b0:
         38:89:d9:5b:52:d2:8f:33:7a:4a:d3:64:65:ec:b8:0c:cf:0c:
         f4:dd:90:66:12:9d:74:9c:9e:11:a4:60:44:61:6d:f9:47:6b:
         8c:87:1d:45:29:85:bd:4c:57:2c:9d:cb:3c:86:e6:3e:2c:77:
         b9:ca:f2:b5:53:da:0d:e8:77:a3:41:ab:a5:09:6e:11:6f:1b:
         24:f6:0d:fe:77:c6:ba:9b:b6:f4:76:0e:45:38:49:ec:0a:13:
         66:3b:61:85:6b:f8:13:1b:77:5f:45:6f:76:ce:89:fd:ef:94:
         10:7c:dd:29:81:7f:4a:db:2c:33:e4:bf:9a:d8:b2:84:4e:0b:
         94:64:7c:a5:33:2d:4e:7b:e5:8a:90:41:86:39:de:75:b7:af:
         a7:0b:74:d4:54:0f:ce:c5:88:d7:c4:04:24:6c:19:23:15:0c:
         36:e6:d3:a6:80:bf:14:c4:67:51:02:b5:58:bc:4f:9e:e0:9d:
         1b:89:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----