Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
File:                     9Z1WxSx3M_g753SvpHu9VdKHl6w.mft (raw, json)
Hash identifier:          raurURRTQKtofovWfFpFRBXcM1wU2XAHJPFoJteHGXw=
Subject key identifier:   33:B0:42:B5:5A:A5:AF:F9:A0:32:7F:B1:86:CB:C8:F9:2D:13:99:39
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Certificate issuer:       /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial:       01962F745A5D4CF670920B1C924209387EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 9Z1WxSx3M_g753SvpHu9VdKHl6w.crl (hash: 1MXROMoRQzFAL5BJlHMz0mHAudaJFs9Zi+AE/aIDL+4=)
                          2: LiwZdmL5RU2B6zVphh68eF-_QCM.roa (hash: 12dQ0T9H1SC1JmN6bqW5YJuYyqtLY06teqdtY4jNB1w=)
                          3: bpOMGbazzT-BkrDmumTqfQYBlb0.roa (hash: l6XZ6lFWNL3LE9dGosqgBQ/Pd0UpxiEBjNXYRa8ne5I=)
                          4: tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa (hash: +3QbGwJKO1wVzcZZV/GJcxqJzgKbCl/1gOdPe63EVdE=)
                          5: yX7sG3wpFe9yZYaNAimw1pZQPYs.roa (hash: QivAR9rkVn6zuWjKGwBCmHSlxo+GMM5mhMT5ya37DwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5a:5d:4c:f6:70:92:0b:1c:92:42:09:38:7e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=33b042b55aa5aff9a0327fb186cbc8f92d139939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:90:c2:8c:53:1c:c6:8d:d3:f5:65:6a:ca:
                    6d:48:e1:5b:ea:3a:30:ac:dd:f8:d6:d0:16:fa:3c:
                    70:0b:d9:aa:cc:93:34:12:30:bf:7e:e7:12:12:80:
                    c1:c1:d8:8e:c2:89:95:0b:c4:58:dd:39:07:7f:ea:
                    1e:db:1c:64:6a:0c:32:b4:37:e5:c0:1f:bf:68:69:
                    84:b1:35:16:48:bb:ff:fe:19:67:84:b3:2f:a0:d9:
                    69:9e:f0:6b:c0:f8:42:36:48:3a:d0:ee:35:82:33:
                    12:83:af:24:00:b8:a4:e2:08:73:f5:e7:5b:52:f6:
                    d9:59:79:ac:91:1e:a5:e8:d1:e5:5c:2d:cb:fb:b7:
                    7d:04:b1:bc:c8:b8:14:7d:1b:0e:f5:a7:35:aa:6b:
                    51:2b:bd:45:0a:4a:9b:39:ad:d5:42:a6:4a:56:dd:
                    0a:3b:28:54:e7:21:7c:2c:77:0b:1b:bd:80:03:36:
                    97:ed:14:4f:d1:27:39:a4:56:62:b2:f9:3d:e3:fa:
                    7e:20:ed:dd:45:79:5f:18:ab:33:d5:07:af:8f:5c:
                    69:ba:fa:68:7a:2b:61:82:dc:f8:10:c8:73:d1:fb:
                    e9:76:29:6a:d4:2b:f2:6d:b3:58:e3:05:de:70:60:
                    ec:c9:d9:a2:e0:8c:e9:1e:e9:63:51:1a:60:f7:13:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B0:42:B5:5A:A5:AF:F9:A0:32:7F:B1:86:CB:C8:F9:2D:13:99:39
            X509v3 Authority Key Identifier:
                keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:54:2d:83:43:ef:c0:ce:18:96:04:82:68:6c:fc:b6:e4:
         0b:9d:37:3d:5d:ab:1c:8f:a9:05:bb:6e:95:89:4b:70:0f:ae:
         fb:74:b6:0c:8a:4e:9b:df:55:ee:de:4a:5f:d1:1a:20:dc:1f:
         8c:71:80:38:49:11:8d:9c:5d:f0:ec:69:ae:a6:cc:3d:2f:93:
         3d:27:10:a7:ae:69:c0:e0:1a:4f:56:d5:67:80:0f:c9:c8:79:
         9d:c9:cb:7a:8d:71:24:db:e1:32:8a:5e:ad:7d:3a:c5:e0:05:
         6c:57:a2:33:7b:d9:cf:d1:07:7e:c5:bf:d3:d6:76:20:59:00:
         dd:b0:5b:54:1e:e8:63:a8:dd:36:bb:25:06:62:33:68:a0:f8:
         2e:48:8c:49:19:c5:1f:a4:69:6d:2a:4a:fc:85:5a:aa:db:3f:
         34:1b:b9:63:30:ce:f8:26:d2:88:29:75:3b:8a:22:21:38:d3:
         99:35:e6:9d:56:d0:48:38:2e:8d:c9:6e:11:43:20:5e:f3:bc:
         e1:74:af:ce:48:5a:5b:cd:1e:96:b9:4a:c0:48:86:12:68:6a:
         1f:39:7c:80:38:7d:71:34:74:27:8a:0a:6b:48:b1:76:3b:6e:
         3e:7c:fb:ee:a2:c3:d6:07:12:d5:3f:a5:5e:d0:a0:99:75:7d:
         04:7d:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----