Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File:                     T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier:          y3kC9EfoWUpimKAtoJCMZeFDuzpuOBDQWwu8mQ6IWSw=
Subject key identifier:   8D:17:71:18:6E:9A:1A:44:B0:5C:6C:C2:07:1B:F8:A1:2C:90:8F:A0
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer:       /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial:       01962F742F9A0B70E525952490747C06EA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number:          03D9
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: Bg1FwdVpt/rZ2FpfqynLTp7ap2hJB99a+wv0iGV8Vm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2f:9a:0b:70:e5:25:95:24:90:74:7c:06:ea:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=8d1771186e9a1a44b05c6cc2071bf8a12c908fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:d8:77:5d:a5:ba:76:1d:32:fc:79:90:ff:
                    f0:77:7a:38:42:3e:cd:22:ba:31:55:82:e0:c6:62:
                    e8:71:02:b6:5a:cc:54:00:ee:3b:32:62:42:2d:93:
                    b9:03:52:ff:14:9e:46:6f:9b:bd:ab:e3:16:7c:81:
                    a6:78:83:7b:0e:30:87:3b:7f:ec:7a:0f:bc:4d:83:
                    2a:b1:67:d4:f2:6e:1d:b8:bc:c7:43:6c:b9:c4:08:
                    c4:ac:25:2a:8b:e1:49:57:be:77:af:ca:7a:12:4c:
                    13:9f:51:8b:39:94:16:75:c0:18:84:ad:2c:81:ea:
                    7c:45:d2:5c:94:34:ef:a2:07:f9:b8:60:67:d4:12:
                    d8:db:f9:f7:68:5f:01:b8:79:ae:02:07:5d:35:11:
                    f1:ea:9c:d7:61:7f:a9:22:37:f5:cc:52:fd:11:01:
                    01:a7:a6:96:5f:90:44:21:e9:59:d4:a0:00:d3:e0:
                    9d:2e:d6:e8:84:f3:03:15:d9:4f:c4:72:28:3d:68:
                    68:be:d0:35:e9:d4:06:de:1e:bb:cf:29:e4:73:b8:
                    9f:b2:61:39:42:9e:61:be:d7:e5:3e:52:4b:42:01:
                    cc:f0:4e:04:c9:5f:58:05:c3:53:03:4b:be:49:53:
                    25:70:43:42:d1:b5:69:be:64:5f:b6:67:42:fd:ad:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:17:71:18:6E:9A:1A:44:B0:5C:6C:C2:07:1B:F8:A1:2C:90:8F:A0
            X509v3 Authority Key Identifier:
                keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:1e:87:6e:93:4b:cc:9a:cf:bd:d7:3e:e2:ed:dc:0a:f1:4c:
         57:78:6a:af:bf:2e:4d:5b:94:e7:83:a8:76:fb:d4:5f:dc:eb:
         77:4c:e7:ee:e7:ce:ca:2a:63:c6:82:3f:e7:bc:f2:06:ce:4a:
         bb:f4:7d:81:98:b4:fc:3b:09:1b:eb:92:8b:c5:72:77:f0:07:
         ea:e5:de:95:6d:3d:5f:d5:0f:40:7b:d0:a9:28:66:38:25:69:
         3e:5b:b9:89:f9:8b:d8:e9:2f:ed:01:ab:6b:78:0f:89:f3:02:
         38:9f:73:68:91:78:43:24:3c:df:69:19:69:ec:d5:62:84:e2:
         40:76:1c:44:2f:1e:9f:58:61:b9:53:6a:09:cc:3f:5b:2f:ed:
         40:0f:75:5e:4c:e0:b4:40:bc:25:8d:58:3d:cb:96:b3:d6:3b:
         c6:4d:1b:25:50:97:7f:80:a5:ac:84:95:b8:78:a4:61:fe:8c:
         8a:3e:a8:ad:22:d8:9f:c4:6b:b9:ec:3c:c1:64:4e:03:7b:f8:
         6d:2e:69:94:19:43:8c:31:88:76:99:16:94:6f:49:f0:5b:14:
         cb:1a:e8:98:c3:b5:21:a8:39:cb:6e:42:ec:bc:8e:95:01:54:
         a2:a1:7f:c3:73:a5:32:ae:b5:e7:4e:fd:5a:bc:87:2b:1c:64:
         03:7b:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----