Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          ra/dvODZEy5YCTdTkEwIADpvF0zbP6Vzq5OrAbi+0a0=
Subject key identifier:   71:1A:66:EF:EE:FA:0F:A3:AB:59:0B:1B:76:29:33:6F:5F:71:9C:BA
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01962E618011A177ED89BEF70E8FCA81C8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          12DE
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: T5TAmWCOx7by1eK6bGMBXLKsBBvXRQNAKcKwWfXwFPs=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
                          5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:11:a1:77:ed:89:be:f7:0e:8f:ca:81:c8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=711a66efeefa0fa3ab590b1b7629336f5f719cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:69:3d:6d:90:b7:c0:ee:86:f1:6c:8e:35:b3:
                    15:3e:fa:b0:a3:23:d3:a8:73:e8:d9:54:5c:56:ff:
                    1d:33:4e:b0:86:6b:ec:9a:b5:a4:b8:5a:ba:29:8c:
                    f1:72:a5:ff:13:48:4e:2c:7f:a9:cc:04:4d:84:52:
                    17:17:dd:8a:c1:b5:73:2a:cd:29:d1:23:b7:ea:2e:
                    31:f6:6e:10:9b:4d:40:e9:d6:fe:74:14:f9:7e:97:
                    64:47:ac:d4:54:23:46:eb:25:34:ba:b8:0a:46:59:
                    52:cf:7a:63:98:20:83:60:6e:d6:22:ab:cc:c0:72:
                    a7:86:2e:06:02:0a:dc:40:c7:20:b3:8b:62:4d:d6:
                    90:3f:13:66:5d:76:82:4f:3e:34:aa:41:e6:9e:6e:
                    4a:ef:30:26:9c:f6:84:f1:cf:9b:fa:a6:48:30:39:
                    0e:1d:35:7e:ce:c7:b9:04:34:eb:ac:5f:76:1f:09:
                    97:94:5e:ff:55:1a:78:cf:39:18:d9:66:3a:79:11:
                    c2:d4:ae:98:74:b4:2f:85:ae:ab:4c:ef:54:c4:a0:
                    0e:48:6a:66:c1:32:63:df:26:e6:40:7e:74:9c:17:
                    ab:04:f9:35:f2:8b:f3:5f:df:0e:a7:e7:6c:f3:0b:
                    4b:25:f7:03:0c:31:96:39:6a:d4:43:2c:c6:43:27:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:66:EF:EE:FA:0F:A3:AB:59:0B:1B:76:29:33:6F:5F:71:9C:BA
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ee:06:c6:e5:4e:b1:18:aa:65:82:2a:bb:c6:12:2e:45:00:
         18:16:3f:89:4f:e0:fa:bc:30:9f:4c:47:06:7a:be:76:7a:f0:
         21:b5:c5:08:da:84:27:24:80:ad:ca:2c:21:e0:d6:f4:5a:1a:
         3d:37:ca:21:cb:fb:e8:ea:43:36:ee:32:66:14:26:11:45:c2:
         4b:ef:d8:62:2e:0a:73:21:2b:72:a1:b3:61:bf:c3:54:2a:2a:
         a7:44:77:d0:42:49:a9:95:c0:05:d0:57:97:c6:45:62:73:41:
         ee:e4:45:5d:53:e7:61:0d:1b:52:73:25:b4:7e:16:87:ff:b1:
         c3:11:f6:ba:80:6e:85:bf:6e:26:10:12:25:3a:17:a1:82:84:
         3b:c7:19:b8:43:97:cd:66:b1:29:c5:6b:f6:4a:74:70:eb:c2:
         1e:7a:fb:91:12:14:43:af:89:68:72:09:aa:25:6b:a3:90:69:
         be:34:e5:8a:a1:5b:a1:a6:7d:07:dc:73:86:5a:4f:57:b1:e9:
         81:ac:2f:2d:a7:fe:51:54:ae:3a:2f:7e:24:05:d8:d9:c7:35:
         71:cc:a6:ac:bd:06:f7:75:47:82:87:96:98:d6:a0:d6:31:be:
         c2:09:c4:5b:b6:cc:25:71:82:a6:5a:67:3e:f8:13:37:2c:8c:
         b1:44:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----