Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File:                     9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier:          QGQlUQwTZEjgMBehQjmWhDGqvD3+16P3EmckevNly3A=
Subject key identifier:   B2:3E:13:06:F7:84:FF:5B:8F:94:72:D6:68:48:C2:48:51:89:6B:DF
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer:       /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial:       01962ECFCC42ACE16228167E9DD1C06F8AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number:          0239
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: K5FfPZFqJ823w60QPiGFNoWxGETiEsMXg8WYk1I9ChA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:42:ac:e1:62:28:16:7e:9d:d1:c0:6f:8a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=b23e1306f784ff5b8f9472d66848c24851896bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:93:05:23:7a:59:43:24:80:7b:5f:ed:2a:
                    c9:af:be:82:18:5f:cc:d5:55:b9:49:78:67:5f:a4:
                    47:14:19:d6:31:d5:ce:34:e7:20:13:58:fd:f1:59:
                    2f:3d:29:8d:35:f8:bd:20:85:30:24:3f:04:cf:4b:
                    b4:f5:9d:c9:cc:8f:fa:eb:55:73:a2:f3:34:af:75:
                    6a:84:f9:bc:a6:e1:bf:a6:ea:92:c6:93:3b:86:46:
                    74:26:12:16:dc:86:b8:9a:8b:cc:13:24:11:5c:e5:
                    e3:fc:c5:d0:be:27:94:b2:e6:41:8c:c5:e2:1f:d9:
                    60:cf:19:91:dc:61:c8:4d:f2:0f:1e:47:7f:7f:cb:
                    4e:57:9b:ab:4b:9f:4f:a3:80:d0:01:00:4f:09:18:
                    d7:53:44:ed:9f:02:99:0b:8c:4c:0c:b6:4f:b0:c9:
                    4c:41:4c:5d:33:39:e7:bc:1e:0c:79:b6:8d:3a:24:
                    6d:30:87:0a:5b:32:21:45:8a:ff:aa:ae:df:95:87:
                    03:86:9b:0c:1a:87:0b:e5:a7:71:e6:d2:ba:9e:a1:
                    7d:d8:ef:31:79:77:f9:be:e8:f1:78:56:07:5f:90:
                    5c:40:c7:27:3a:b4:17:12:fa:9a:da:00:27:33:c9:
                    dd:6c:f2:83:bc:34:5f:27:00:1e:8a:dd:ec:68:a5:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:13:06:F7:84:FF:5B:8F:94:72:D6:68:48:C2:48:51:89:6B:DF
            X509v3 Authority Key Identifier:
                keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:77:a4:d1:cc:04:39:de:37:2d:43:38:d8:90:08:6f:f8:
         95:db:fb:4a:10:e0:80:1e:90:77:c8:2a:e8:81:d4:f9:f8:6d:
         c0:ac:a0:fd:3a:91:d8:bf:39:74:bd:12:be:46:ab:86:92:17:
         5b:7e:6c:8b:73:ce:3f:9d:1d:8b:b7:fb:71:02:fd:cf:ac:6a:
         15:2e:2a:e9:5c:f0:bf:20:4c:8e:20:f2:52:e1:c7:fa:24:d0:
         cf:b9:5a:9d:77:a0:f5:1b:37:59:13:8b:e3:05:1b:f7:b5:8f:
         ba:5b:88:53:ef:21:61:3b:b1:2f:db:9e:f7:58:bb:85:70:dc:
         56:29:15:ad:61:3d:77:3b:2c:d3:f3:a5:9b:2e:d0:4f:6a:ca:
         f7:f1:22:54:1f:a9:b6:cc:8f:7c:12:e4:9a:96:c6:a9:20:31:
         af:63:04:ee:66:7e:37:ef:aa:6d:ea:d4:1d:6e:3f:e2:21:f9:
         55:c3:42:2a:6e:c0:9e:0b:e8:75:b4:99:eb:7c:78:83:69:60:
         10:4a:e8:b3:6c:c6:bb:00:8d:9a:78:5b:67:05:3c:30:7d:eb:
         1e:c0:dd:ae:af:60:4c:06:81:71:9b:6b:87:00:9a:c7:70:8b:
         84:ec:96:41:5c:61:a0:c7:e2:61:38:a6:69:c3:28:b5:5c:b1:
         2b:82:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----