Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File:                     9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier:          8zfeyHwdSHYEqpr9Wtt54CgE3oZY8TsQU9xkJADP/co=
Subject key identifier:   A9:1F:B6:D7:DA:97:E2:0B:6B:17:63:83:FE:47:0D:68:6C:EC:56:89
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       01962DF43D97A65AD427883B5CE6D11E9922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number:          0D02
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
                          2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: iG8sB/8abeDp7nFRY+OpQeqWo4/m4f7ZXFGpoR1Pl5U=)
                          3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
                          4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
                          5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
                          6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
                          7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
                          8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:97:a6:5a:d4:27:88:3b:5c:e6:d1:1e:99:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=a91fb6d7da97e20b6b176383fe470d686cec5689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:43:1c:b1:e3:72:b1:3c:a9:46:b2:3e:8b:
                    25:53:ee:b2:b4:57:8c:3c:fe:95:19:dc:ea:5a:2b:
                    d9:b6:08:b0:00:52:19:3e:f2:31:c9:c2:32:32:22:
                    d8:00:b0:95:a1:e0:40:3e:f0:f0:c7:07:03:6e:a0:
                    fa:cd:5c:ce:3a:b4:91:e0:d5:9c:32:7e:bd:5f:37:
                    6d:a3:14:06:f9:66:ff:1c:92:4a:9b:e8:46:49:dd:
                    4b:53:fb:f2:e2:7e:77:20:0f:5c:96:58:22:18:67:
                    b0:ee:72:37:3d:4a:6e:31:66:ab:ce:c9:6d:5c:97:
                    7c:24:9e:ab:af:2c:64:4c:4a:08:db:e5:0a:23:13:
                    0d:0b:86:58:23:b1:71:69:8d:d6:8e:44:c4:8c:52:
                    27:7c:bd:16:ed:99:a4:1c:40:fc:b2:f6:b4:81:ac:
                    30:88:35:e9:16:f6:f2:43:c7:70:07:dc:e2:98:7f:
                    8e:38:94:78:e7:96:29:a5:6d:26:65:cf:91:70:9e:
                    39:fb:45:3a:8a:db:6b:97:44:68:68:72:87:3a:9a:
                    11:7a:1b:b1:ec:fd:06:6e:32:30:d8:00:27:7e:c0:
                    90:f6:fa:cf:dd:d8:24:b0:bc:3a:af:2a:f6:4f:92:
                    ce:ab:7e:c0:be:2f:e7:cc:85:b7:db:95:9f:8b:20:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:B6:D7:DA:97:E2:0B:6B:17:63:83:FE:47:0D:68:6C:EC:56:89
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:1e:f0:46:32:45:4a:5f:34:98:32:c1:ec:1e:cd:3d:22:
         a4:4c:29:29:d0:0b:44:62:54:a4:5f:c9:4c:4b:04:5b:8a:06:
         9d:87:e4:81:0b:f1:2c:36:f6:48:f6:d8:0a:02:c4:91:3e:dd:
         c8:d1:a9:47:00:7d:3d:fc:02:6b:c9:d5:0b:be:d6:d2:01:75:
         16:99:31:32:db:d6:ca:6e:d4:0f:41:30:c8:69:b5:1a:91:77:
         4e:98:ee:5a:6f:2f:27:c0:88:91:12:5b:54:ac:71:83:e3:3e:
         7e:57:fb:04:5c:f9:a7:d1:e2:3f:0e:b6:6a:22:9c:f8:69:c5:
         19:f3:66:23:9d:7a:fc:43:94:b9:2b:68:05:68:60:d2:14:39:
         d4:b4:95:f3:e3:12:e0:37:bb:74:dd:eb:37:07:d9:cf:e8:9e:
         a8:a0:9a:ae:15:9b:61:fa:bf:3b:3c:53:55:1e:96:d4:4d:9c:
         a1:92:f3:e0:34:13:09:76:3e:aa:7b:ed:69:da:20:e9:ab:c3:
         98:11:7e:87:69:2a:0d:b4:67:b4:e7:cc:f8:c9:12:12:cd:98:
         f2:19:c6:7e:8b:10:d6:56:b4:b4:4a:4e:70:d6:a7:09:d4:5b:
         0c:82:9d:1a:19:f5:3f:0c:80:67:b4:d8:71:17:ee:ee:c4:49:
         2c:86:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----