Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File:                     S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier:          R8wdhhNtDYNf04YamBFKpS9eMbPsAzXDXTugtTcuJis=
Subject key identifier:   EA:63:37:D7:D1:CE:5C:05:59:4A:B4:71:CF:A8:53:B0:8D:C1:2F:4E
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer:       /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial:       01962E988458AD6179D5AE0D7D64B3D3A1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number:          1059
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: pDC3HdH9jFjQRDt6lljfYXkuQR/YuhLD8lLXHG9qNLk=)
                          2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:84:58:ad:61:79:d5:ae:0d:7d:64:b3:d3:a1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=ea6337d7d1ce5c05594ab471cfa853b08dc12f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:21:8e:8a:93:65:3f:04:bb:c1:87:d6:7c:
                    24:b6:22:ec:0d:ed:fc:ee:17:f6:46:9f:8e:12:37:
                    0c:3c:8b:dd:74:81:af:ef:9e:be:bf:3a:12:97:36:
                    85:b4:f1:c6:fe:b0:15:0c:ee:2e:3f:1d:a9:22:88:
                    19:00:b0:80:94:ee:0c:56:7b:ba:98:fb:d3:46:e0:
                    21:2b:d3:d3:e4:27:40:34:df:86:2d:f3:1b:1f:ef:
                    1c:2f:d1:82:a6:05:dd:12:af:1b:7d:00:1c:f8:45:
                    d2:2e:c4:f8:5f:b3:0d:38:91:cd:c6:d1:64:7c:f3:
                    64:35:b0:d1:41:2a:0b:c4:4c:70:61:a2:57:13:d3:
                    9a:c8:cf:a7:52:8f:c2:f9:29:cf:53:05:b3:b7:f2:
                    a7:9c:79:1e:2d:c7:c4:16:7b:39:13:0d:12:9c:a1:
                    7e:e1:9a:41:53:9e:ef:55:09:58:70:6b:1a:eb:d1:
                    d5:d4:8f:6e:68:8f:15:ed:be:43:b0:22:fe:08:33:
                    59:39:0a:ef:4b:f6:db:8f:8a:8d:57:37:27:e6:00:
                    49:4a:8d:04:07:c3:cf:e5:ea:72:4b:2d:ea:2c:52:
                    79:7a:46:47:14:4d:27:fa:45:a4:47:b9:83:92:10:
                    6c:69:f1:47:d3:fa:0b:b4:76:c9:e4:a2:96:95:07:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:37:D7:D1:CE:5C:05:59:4A:B4:71:CF:A8:53:B0:8D:C1:2F:4E
            X509v3 Authority Key Identifier:
                keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:53:f6:d6:a7:24:01:e2:0a:f7:2f:c9:88:8f:bb:bf:e2:
         c5:3c:0d:5d:e7:87:91:08:48:1b:3a:03:ac:d4:dd:0f:0e:8a:
         7a:d9:6d:9d:42:49:4c:c3:62:bc:13:f0:ba:15:da:f1:95:8c:
         40:7f:6a:03:17:d1:e8:da:75:90:8b:49:39:8d:55:5a:28:87:
         e9:37:e0:43:92:7b:ae:95:3c:46:c9:76:59:6f:f0:71:0d:ca:
         c7:9a:e3:41:e1:99:e6:d3:de:e4:56:e3:80:af:62:39:0e:6d:
         e8:dd:9d:43:fe:f0:43:fd:73:80:cb:8a:c7:aa:32:98:b7:eb:
         f7:08:6a:36:9a:03:ee:f7:45:17:f4:83:5b:51:69:d4:c2:7f:
         c7:60:30:00:c8:b7:f8:0a:38:c5:78:3a:2f:fc:c4:e4:55:be:
         97:ad:e7:9a:40:00:ea:31:b6:83:48:9c:d9:d9:46:e7:9f:6a:
         bc:d1:9f:8c:b8:5f:17:ef:82:be:79:73:41:06:4c:70:3d:ed:
         5a:0f:11:ba:4e:f1:b8:75:cf:e8:7b:45:43:b2:17:6e:dd:1e:
         71:18:6a:3b:89:7d:1c:1e:9e:83:1d:ec:ca:6f:b4:66:bb:73:
         c0:4e:9e:9f:a4:c3:0f:2d:fe:8c:28:db:7b:8a:a5:14:a7:76:
         e6:d4:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----