Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
File:                     b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json)
Hash identifier:          Iklk/fUBBCeFohHnVlT6JgvGv43kONRVJaLYPKxhILU=
Subject key identifier:   86:35:7A:6E:6D:7D:5F:5D:85:8A:F2:E1:C1:62:6D:41:9B:11:B2:D2
Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
Certificate issuer:       /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Certificate serial:       01962DF43DD9A7EEEC121737AED61A0D5304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
Manifest number:          0EB8
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: /sZhBA2y01b2wBXZ2tXgOCibio2MBddeT8GXuPM8yzQ=)
                          2: exWn383Me8YqefkEkqOEr7GA0lc.roa (hash: 8G5LjurjltQVZ/Cei3JUqckWZBdyjOdLypvjmgHtD9Q=)
                          3: j8hnOgwPyOJJER9yhbqnSy6j-6E.roa (hash: OSveZybS9oVkY+wpn3hX+0Fo2xDMcVDw4ufaSD54UIM=)
                          4: phl5ADT4JOxw9LjD_howBB9yfb0.roa (hash: 82y/mhEJRV2o/QC0q9OGEvAp2yixVnuDKDU0FyYM5oM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:d9:a7:ee:ec:12:17:37:ae:d6:1a:0d:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=86357a6e6d7d5f5d858af2e1c1626d419b11b2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:de:bf:ec:dc:40:be:af:63:1a:31:e4:cf:
                    94:9a:60:c1:8a:4e:0f:0a:b2:f5:60:ac:3b:fd:8c:
                    bf:ac:a7:72:eb:6b:a4:55:48:fa:59:6d:5a:63:1b:
                    3d:a4:bf:a7:76:1d:cc:77:1c:54:62:0a:70:3f:27:
                    0c:ca:b7:8f:46:ca:da:d0:0b:51:30:3a:13:bd:b5:
                    03:a4:15:0f:9f:78:ef:6d:b9:4e:25:f0:69:a3:42:
                    ba:37:33:65:78:dc:76:5d:e1:02:cb:07:e5:d7:6c:
                    4c:d9:1c:12:af:c6:b1:0e:c1:b7:db:21:84:d2:8f:
                    c9:6e:b6:d3:d5:0d:db:73:3e:fa:6e:52:4b:da:41:
                    e7:12:01:f3:b3:7e:e4:13:83:89:59:09:73:bf:df:
                    ca:e3:26:68:3b:e3:88:97:33:ed:c2:c3:16:27:1f:
                    18:1f:b2:1c:fe:86:de:9a:2f:4f:d1:ea:bf:b3:8d:
                    35:d5:67:17:30:64:d6:b7:6b:7d:65:0d:c5:1c:2e:
                    9b:3b:a7:7c:d9:db:eb:f0:db:fc:81:10:45:d1:77:
                    94:49:7d:fa:49:a1:1d:7a:0c:62:e3:2c:88:07:6c:
                    33:bd:bb:25:ee:07:3a:df:a8:64:41:fa:c1:12:d2:
                    c5:43:70:18:ae:79:36:f6:29:a2:0f:c4:dc:bf:a2:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:7A:6E:6D:7D:5F:5D:85:8A:F2:E1:C1:62:6D:41:9B:11:B2:D2
            X509v3 Authority Key Identifier:
                keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:3e:55:6a:53:9e:cb:c1:0e:eb:bb:f3:39:1b:f9:d1:26:
         ce:9b:37:c2:32:19:0e:60:28:a6:a9:dd:50:2e:ab:a6:65:3e:
         5f:96:f3:76:f4:d5:3b:58:96:41:8b:6a:ad:50:5a:23:c3:72:
         ac:69:58:5c:92:bf:65:80:43:42:58:96:d6:2e:ce:01:eb:c5:
         50:5f:df:3c:4f:76:ac:6f:6f:5a:0f:11:84:f6:68:d0:45:8a:
         7a:35:b8:7f:9f:39:01:2a:bc:34:50:92:d6:7f:f4:bd:e0:53:
         00:9d:24:94:c2:1f:3f:a7:09:c2:32:8c:b1:9c:1e:80:0c:f5:
         50:2a:1d:47:44:61:e6:1f:ac:b5:26:b1:48:62:ac:52:37:be:
         0c:2a:28:7e:0d:38:dd:98:52:ea:b3:95:8a:2b:a1:5d:a4:37:
         61:27:2e:67:18:85:03:25:96:85:38:2f:49:43:53:9c:ff:dc:
         90:a2:8b:24:ac:e5:60:68:4c:32:fb:f3:09:b8:c2:8d:53:df:
         66:24:ec:64:d0:6d:e0:7f:e5:49:d2:21:1a:f0:7d:fb:79:c9:
         2b:2b:cb:11:73:61:91:6e:f4:1d:a2:99:25:58:75:ab:d1:9d:
         19:e6:01:0e:42:cb:a3:89:43:48:f5:58:fb:46:88:25:8e:1b:
         30:cc:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----