Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          JI/RXRZm/E+q6V+37X7Lzqst1rrv/TwjFtCj7jTH0bU=
Subject key identifier:   7E:FE:FF:7A:6C:39:45:E0:F4:49:33:5C:59:A3:45:EE:86:72:2C:79
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       01962F74C835B91E803D5C7D0309865AFE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          11D9
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=)
                          2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=)
                          3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=)
                          4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: r279Pr9UnTpiBt3KKmaAOsaUVi2RMQEbFWs3ZblcNe0=)
                          5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c8:35:b9:1e:80:3d:5c:7d:03:09:86:5a:fe:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=7efeff7a6c3945e0f449335c59a345ee86722c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:a5:d3:27:61:5a:51:44:3b:9e:f7:1b:47:
                    d6:cf:8b:25:b1:b6:52:c3:76:b1:22:a5:ce:83:2e:
                    d7:82:f1:11:28:71:39:13:fc:52:25:d3:24:da:8f:
                    f8:9a:a0:41:cb:51:b2:95:49:33:15:6b:94:cf:d6:
                    a5:5d:35:76:23:51:b3:17:c4:6d:1f:34:a3:4d:f7:
                    da:93:6a:0a:fd:01:a2:5d:c9:3c:77:fb:e7:79:2c:
                    fb:3e:26:90:9e:98:9f:29:16:89:3d:8e:9b:d3:a8:
                    f1:79:fc:92:a4:62:78:97:03:ef:97:5e:c7:7b:f8:
                    7b:d3:51:e3:9e:0c:5c:4d:81:31:76:05:ae:ee:7b:
                    24:a8:bf:11:59:4d:8e:1a:cc:ac:7c:0d:64:b7:9c:
                    fe:40:07:04:b5:7c:b4:57:40:f1:e4:a6:26:92:93:
                    01:cf:2a:6a:f1:a4:ca:89:dd:33:9a:87:78:db:c4:
                    1c:4f:ef:9d:d4:c5:f3:dd:ff:fd:e7:26:df:bc:18:
                    d1:08:48:47:fb:79:50:ad:c9:fb:28:15:2c:c4:8d:
                    d5:3e:f9:83:ae:17:91:83:fb:9c:c7:f0:7e:8e:c3:
                    a1:5f:e2:59:43:eb:6f:3a:58:05:b5:5a:74:4a:78:
                    08:c8:94:30:44:1f:0e:da:1e:a6:d3:0b:2e:39:7f:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FE:FF:7A:6C:39:45:E0:F4:49:33:5C:59:A3:45:EE:86:72:2C:79
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:17:40:c4:25:9c:84:00:67:80:9b:bb:d7:30:9b:29:b8:
         69:ca:2e:f4:6f:7a:76:e5:4d:82:94:e5:e8:28:3f:48:f5:5f:
         ce:c8:3c:4d:8f:73:54:6e:ab:c4:42:f7:9f:cf:5b:e9:f2:a6:
         57:53:77:d2:a8:04:8f:c5:3e:2a:5a:89:c5:b7:89:60:f9:0d:
         2a:63:27:90:9f:d9:a9:16:7c:1a:53:43:4d:75:5f:b0:b9:67:
         d5:91:6b:25:07:54:48:78:ad:73:90:2c:2c:0c:73:ce:49:d4:
         c6:8b:09:af:fd:4f:e1:e1:35:fa:38:6f:c9:e9:e2:4f:80:bb:
         f2:3e:79:b5:81:a8:80:3a:a7:ba:52:81:20:a7:3c:0b:e1:3e:
         13:dc:b5:d7:d5:6a:b9:42:76:5a:c2:d8:b4:f7:2b:5c:13:6f:
         a4:c9:c7:c2:46:ed:03:88:b5:60:77:4d:fd:68:d4:d1:68:09:
         32:45:20:0f:c4:a0:aa:51:59:19:88:57:3c:fb:10:a5:70:9f:
         0e:12:82:40:b4:7d:c1:cb:44:83:46:03:dc:b4:22:e4:d7:81:
         8e:22:94:a8:35:b4:65:34:07:b7:f0:b2:68:26:e3:08:74:e9:
         4a:79:17:bd:0b:19:34:d9:83:5b:2c:57:7c:f7:07:05:d7:f8:
         0f:23:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----