Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File:                     z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier:          mevR98X0qKRVHCKRDQfLqBRIkQtuHe4zN/rdXKSE2Jg=
Subject key identifier:   F7:CB:40:42:48:20:65:D8:D6:34:68:39:3C:85:FF:64:45:8F:D5:92
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer:       /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial:       01962DF3A45BB10E48A9568B901F6725CA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number:          093C
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
                          2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
                          3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: AeL731smDphtyRJJ5HlO9nwHak8Kg4+hyHokpFmXaFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:5b:b1:0e:48:a9:56:8b:90:1f:67:25:ca:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=f7cb4042482065d8d63468393c85ff64458fd592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:b5:60:a7:35:bd:93:c5:e2:92:70:9b:c6:
                    54:0e:30:22:0b:0e:02:3d:e7:75:63:42:c6:24:4b:
                    8f:29:8b:a9:0f:a1:ea:0d:1f:0b:bd:1e:30:5f:d9:
                    dd:c3:de:41:bd:fb:35:09:b4:62:73:77:6f:f8:61:
                    a0:57:b2:92:08:35:11:58:a3:12:81:0a:94:21:82:
                    cb:dc:ea:61:44:b9:5c:ef:22:0e:cc:11:39:03:5a:
                    7e:83:8c:96:74:82:10:6b:cf:80:64:5a:a0:33:77:
                    2b:78:4b:27:43:87:06:90:f0:5d:8d:c0:77:3c:78:
                    ab:eb:9b:9b:22:c4:bd:99:62:b1:7b:05:d1:06:4e:
                    9f:13:41:5e:6e:3a:36:ea:b6:33:62:90:7a:80:32:
                    a3:9a:8c:21:50:15:9b:dc:35:e4:49:3e:7e:5a:a9:
                    f6:a0:fe:0d:d0:b9:63:ab:99:69:62:79:ea:86:4b:
                    52:85:5f:79:73:0f:8f:5e:2c:e9:2a:8b:ef:f3:62:
                    5d:19:f8:9b:2d:a0:d7:89:f9:e5:19:21:ad:12:84:
                    c1:0f:a5:ae:fb:cc:5e:3d:81:73:ca:eb:9b:d9:72:
                    41:61:c5:68:8d:80:aa:ad:59:71:30:59:0a:3d:bc:
                    53:c8:37:cd:6b:88:9e:6d:f9:93:77:40:78:b2:2c:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CB:40:42:48:20:65:D8:D6:34:68:39:3C:85:FF:64:45:8F:D5:92
            X509v3 Authority Key Identifier:
                keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:e1:d1:09:47:a8:a4:cd:56:90:3d:1b:d3:e4:96:0c:69:
         12:10:e7:19:af:92:01:c9:3e:64:65:c2:97:0d:62:b2:dd:46:
         c2:6c:36:46:96:da:2e:5f:73:53:9e:36:99:07:7d:0a:05:23:
         91:2a:ab:c7:d1:c0:61:9d:83:4a:78:cd:fb:f2:f5:da:1b:f4:
         de:9b:cf:bc:91:5a:88:b4:e6:08:79:18:76:92:3a:f6:9c:68:
         34:4e:c5:ce:03:1f:d2:4b:1d:4a:45:21:c2:6a:da:69:1a:df:
         98:15:56:de:6d:c0:04:2e:3a:9f:e4:e8:1c:c0:bf:87:ac:72:
         25:51:5e:73:21:90:64:1b:17:2c:3a:7e:3d:ee:71:73:21:d5:
         0f:d7:b2:d9:33:93:5d:b6:17:52:19:b3:1e:70:73:d4:64:f9:
         77:e1:3f:36:95:d0:eb:a4:ec:d5:28:da:3e:17:b8:ce:ad:69:
         87:fe:f3:e4:87:04:63:88:ae:01:9c:91:00:a3:67:33:b1:e2:
         de:f1:58:27:27:1a:d5:d4:c0:bf:50:73:81:12:fe:27:2f:b1:
         74:1c:dd:ae:02:f8:62:48:dc:9d:fc:84:11:de:b3:61:17:83:
         5f:f0:9c:09:69:8c:97:d7:bd:ff:5f:24:62:25:d0:45:8f:0c:
         d4:46:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----