Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File:                     _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier:          +ICtPR4hc2Al2Vhkgp485NUExNFR601NKIb5UX5rVHg=
Subject key identifier:   8F:B0:B9:50:0E:6A:3C:9F:B4:4D:C9:88:64:1B:8B:A0:51:63:2D:A1
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer:       /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial:       01962DF3B6928DB7BA08FF99DB30AE60B72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number:          0BF2
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: D4yYkLpF8D5f6l27ciWxoAmIj2BL2EsCFYs0AVCTECk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b6:92:8d:b7:ba:08:ff:99:db:30:ae:60:b7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=8fb0b9500e6a3c9fb44dc988641b8ba051632da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:dd:2a:ba:41:51:46:27:e2:17:4b:fd:38:
                    07:a6:43:fd:4f:94:68:2e:0a:f7:27:77:5c:1d:ea:
                    91:68:e5:d7:5d:0a:5f:80:f8:d5:dc:c1:6e:5c:80:
                    5e:b5:d7:26:84:d5:4c:6c:1c:c8:a3:76:e9:af:01:
                    ca:95:a7:f2:5f:96:b6:74:51:2f:d9:f2:77:62:70:
                    8b:5c:94:1e:08:0b:c4:a1:c7:0c:6e:98:ad:35:37:
                    58:69:df:6d:43:78:0d:6b:d9:fe:b9:0a:60:3c:47:
                    12:cd:39:73:ae:b1:d8:5c:19:2a:33:c0:12:14:7e:
                    ce:b4:4e:ad:d7:59:f2:51:39:db:06:0c:99:dd:55:
                    68:d9:5d:f2:54:fb:9a:e7:cb:bb:16:f5:49:dc:85:
                    57:15:18:4f:4c:00:ab:a2:56:09:e3:1c:1a:33:71:
                    bc:a7:2e:ee:81:a4:fe:b6:5e:cf:f9:db:f2:28:c3:
                    98:d3:fb:5e:64:96:cc:5b:8a:6c:d2:23:69:77:6a:
                    1c:bd:79:30:66:b0:6a:d9:57:42:64:a2:8b:f1:b8:
                    19:1a:1f:d7:01:88:cc:f2:d3:83:c5:df:af:1e:eb:
                    a4:63:bd:9e:a1:75:d1:66:5d:f3:6e:19:05:25:53:
                    2e:14:61:63:17:3f:de:2a:a3:06:30:59:ef:0b:3c:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B0:B9:50:0E:6A:3C:9F:B4:4D:C9:88:64:1B:8B:A0:51:63:2D:A1
            X509v3 Authority Key Identifier:
                keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:84:2b:1b:c1:60:7b:64:dc:63:d1:87:44:2e:61:17:ca:
         61:e7:8c:20:be:0b:8d:8e:7c:73:c0:82:23:92:35:cf:10:67:
         ad:98:68:3a:48:6f:cc:1b:8e:3e:5c:0f:b4:9f:32:3d:36:d7:
         75:c9:33:79:5d:cf:84:a5:93:d0:06:1a:da:81:e3:fd:40:d1:
         14:11:66:9e:55:ba:d3:d2:b6:82:c4:bd:7b:16:1c:27:97:32:
         72:b5:7e:c4:3f:65:3a:f3:75:ef:ed:79:37:04:75:b8:63:bf:
         ed:0e:63:d3:d8:88:5d:00:57:12:62:12:9d:8d:ba:08:c1:c1:
         9c:41:16:0b:09:a7:ce:16:4d:3e:1c:f7:4d:b5:68:fc:80:80:
         f0:7d:b4:d7:31:c4:85:83:cd:83:db:a5:46:f5:79:56:b0:e5:
         37:7b:b3:11:ee:cf:64:8e:e8:00:9f:41:39:b9:f5:c5:28:29:
         1b:1d:fb:d1:ed:a1:b6:4f:a6:9b:a2:1b:73:86:a4:72:29:71:
         c2:f6:4c:50:e6:39:cc:49:90:02:f9:d8:a9:25:8d:79:b4:70:
         9e:14:15:d7:7f:11:a6:3a:c9:44:fc:bd:f9:ab:fa:64:f6:59:
         6d:b8:7a:2f:2e:f0:fc:28:81:0d:3c:8a:c1:99:2e:02:9e:1e:
         91:52:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----