Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File:                     9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier:          BVmdf+3TOOmf/ie+RTSaO+f6Ogo2NLOOPS0bz1MfvGk=
Subject key identifier:   DE:19:CA:A4:1F:E7:5C:1A:63:D2:5A:46:9A:94:A5:28:FA:39:13:17
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer:       /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial:       01962ECF8FFE40A4C5ADD7B6F563DBFEF045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number:          02C0
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: 92mH/p0U30fTnfaL1b0c6RxyUAyfZC++mOwqRzvKSH0=)
                          2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:fe:40:a4:c5:ad:d7:b6:f5:63:db:fe:f0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=de19caa41fe75c1a63d25a469a94a528fa391317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:68:0f:4c:d0:58:c6:60:f8:cb:3c:21:d1:
                    9b:1c:61:f9:06:a4:f2:9e:d6:ee:5b:ca:63:d5:03:
                    47:92:5f:8d:5b:10:1c:26:79:53:9f:85:ff:e0:30:
                    f7:4d:bd:a4:ef:e3:48:2b:df:0d:e5:6d:97:25:20:
                    55:ea:e9:9d:d9:70:49:7a:68:cd:9d:d9:69:eb:a2:
                    51:9a:f3:8e:20:9b:0c:74:ee:55:c9:a0:3c:aa:a4:
                    87:0f:c5:96:b7:34:c8:c0:0b:51:c8:4c:30:c5:e9:
                    b4:1a:a0:f6:4e:ed:4b:27:e7:44:28:c4:76:34:04:
                    4b:1a:65:95:63:89:62:6a:c8:f3:fc:87:17:10:a8:
                    51:96:20:fd:96:4d:ab:80:25:6f:45:ef:05:8a:ed:
                    07:b5:64:88:1e:2b:e3:ed:00:38:33:da:82:6c:46:
                    99:6b:f6:a9:9f:bb:15:58:1f:a7:dd:16:13:19:94:
                    9e:4f:18:8a:4e:2b:91:6a:3d:53:56:5a:2b:6e:dd:
                    3c:44:ad:cf:4f:8f:e1:0d:b0:e9:51:e3:4c:df:59:
                    e5:0a:f4:39:b3:93:d5:c5:a9:78:7c:3d:ac:30:71:
                    e1:54:41:d8:d9:2f:35:be:dc:92:f7:e0:3a:ac:b1:
                    2a:9c:ae:6a:4e:21:75:5e:0c:d9:3c:b7:66:8f:75:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:CA:A4:1F:E7:5C:1A:63:D2:5A:46:9A:94:A5:28:FA:39:13:17
            X509v3 Authority Key Identifier:
                keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:21:dc:98:ed:44:6d:b4:20:45:b4:08:5e:c3:e1:93:f8:
         dd:3c:7c:4a:d7:ea:dd:42:59:7c:aa:63:cb:92:03:40:97:e8:
         0d:3c:13:c3:86:5d:ee:51:1a:ac:87:a8:8d:5f:84:23:07:5d:
         1e:de:1a:f1:7e:f3:a1:65:f2:ee:e6:21:35:73:df:d6:26:7d:
         32:de:46:1b:5b:fb:6b:00:40:57:27:15:94:73:f2:7c:92:ab:
         01:a9:0b:f1:15:e1:ca:0a:89:06:31:01:0e:05:68:a3:14:6f:
         a2:11:27:8c:ff:ac:4d:91:bd:84:d0:75:9a:2b:37:9b:29:bb:
         48:70:e5:13:d0:8b:a7:77:b0:41:31:58:dd:2c:43:13:f8:63:
         0e:7e:c0:15:93:f9:17:6e:79:a5:c2:e2:b0:dd:be:ee:8d:47:
         39:4f:f6:32:71:68:05:aa:b0:c3:e1:42:08:16:d2:bd:35:2f:
         2f:20:76:b3:2d:41:53:d8:b1:6c:2c:e5:97:f4:88:6a:be:3d:
         e2:e6:25:e6:80:98:fc:fe:78:f6:7a:cf:27:bb:14:eb:d1:f1:
         cb:84:c1:8f:87:7a:4d:3b:7a:ee:20:a3:67:78:0e:b5:a7:63:
         2e:8f:57:dd:82:fe:ea:ce:c4:1e:ec:e4:44:b8:98:e7:ea:1a:
         39:8d:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----