Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File:                     9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier:          ekPHm96F2EWhTFjhhPDWfsMTaDZ8+eNApRnXk3ogo1A=
Subject key identifier:   24:01:F9:F6:0F:5B:E5:19:64:FC:D3:DB:9D:02:1D:68:CB:30:CF:60
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer:       /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial:       01962F070371BF6A6FE31AC3FA367474BD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa (hash: A3c3lK9eOK2+oXlJyN8L6YhZDvbwMKgjDORS3hJPEzI=)
                          2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: 5OW1ROipdY7PNbL7JhdG9CDoxqPK589/srG0JDF6QGc=)
                          3: C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa (hash: I6wlUhROKZbhSUVuQLxUOY2F8mo+U4zrTtPsYJyoX+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:03:71:bf:6a:6f:e3:1a:c3:fa:36:74:74:bd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=2401f9f60f5be51964fcd3db9d021d68cb30cf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:23:b3:d4:5f:fa:bc:bd:76:2d:9a:52:4d:
                    b3:2a:c1:00:7e:bd:d5:cc:60:57:bc:53:71:b9:98:
                    54:be:40:bf:a9:1b:9a:8f:e6:bb:e1:9f:aa:3e:85:
                    91:fa:be:fd:68:4f:74:af:b6:a4:1b:cc:3f:0c:28:
                    3b:97:eb:01:76:45:61:f7:bb:2a:75:42:4a:1a:7a:
                    b3:6e:c3:f9:7d:91:89:91:ee:04:12:85:89:66:1f:
                    59:57:71:d3:91:dd:77:35:fa:7b:cc:49:8b:e2:e0:
                    f0:a8:2b:5d:d8:33:1c:70:3f:5b:fd:80:53:23:4e:
                    ef:8d:b2:23:c3:70:07:cb:15:ee:aa:0b:b2:ad:59:
                    2f:1d:5c:b3:24:0a:13:98:c5:be:9a:c1:f8:24:dc:
                    b9:ea:7b:ef:8d:24:1f:54:86:82:ee:47:6a:2a:0d:
                    4e:de:6f:78:e3:5b:f8:aa:0c:11:97:6b:35:db:8b:
                    58:6d:68:d2:39:ec:6e:3f:19:67:1e:f3:52:e8:b4:
                    34:10:d1:80:8c:f9:e0:4c:f8:3b:35:d5:5d:49:7f:
                    ec:32:fc:94:b3:76:84:a6:a5:b7:b7:60:d9:15:b4:
                    90:3f:01:ba:84:6e:72:a4:47:c8:a8:ac:b0:31:22:
                    66:2a:10:93:69:60:9c:a1:28:b9:9e:b8:01:25:53:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:01:F9:F6:0F:5B:E5:19:64:FC:D3:DB:9D:02:1D:68:CB:30:CF:60
            X509v3 Authority Key Identifier:
                keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:55:39:5e:65:eb:7d:a7:a2:cc:25:75:bb:59:e7:2b:c9:bc:
         a9:fa:16:43:cf:27:7c:2b:11:20:8e:00:e1:f4:91:d6:d1:aa:
         42:c2:7c:6a:a4:be:2f:eb:79:0d:f5:cc:2f:d0:36:e2:db:77:
         9f:5c:af:17:3c:b5:e9:c6:52:bf:f2:9d:ce:0a:5f:85:41:49:
         bd:95:41:50:8b:6c:7c:d7:ca:60:72:a1:e7:1a:1a:d2:7b:86:
         19:80:dc:c1:ef:3c:fb:12:a5:1c:44:cf:06:d8:e7:f4:a4:e2:
         e1:98:6d:b5:88:7f:dc:50:6f:79:e8:fa:58:b9:b8:cc:68:74:
         92:39:18:8f:a3:76:d9:af:9f:6f:f4:ef:c3:94:3c:db:05:12:
         7f:8c:d0:18:7e:1f:68:9e:83:8a:3c:5e:79:21:00:1b:d4:b9:
         cd:7e:7a:af:31:04:ce:39:16:8a:6f:df:41:fd:8f:05:86:d8:
         1d:e4:62:7b:8e:74:b7:ce:98:d1:a9:14:e4:25:e0:1c:f0:68:
         c0:57:aa:96:54:a2:17:ce:4c:d6:d6:ab:be:c4:70:5b:da:b1:
         c4:52:b5:c6:44:07:db:38:c2:f2:c2:8f:77:b6:1a:7a:96:c9:
         bf:cb:23:24:21:c6:bc:f1:3e:ef:68:4d:49:7f:af:b2:63:5b:
         89:7d:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----