Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File:                     9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier:          c3ng0bCP+Am/DX2Yr+dxWA3lcXetDlO2eH7/weMs4dc=
Subject key identifier:   16:D4:2A:75:94:B4:5F:8E:4B:34:B0:E9:FB:FC:FF:33:1B:4F:5E:49
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer:       /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial:       01962F74199AC8B2470CCE5B075AA14088CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number:          0961
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: 18PXI7J9ZsIplDbIb2FujQZ9WAKx4MvF+aTHeu+m+vo=)
                          2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:19:9a:c8:b2:47:0c:ce:5b:07:5a:a1:40:88:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=16d42a7594b45f8e4b34b0e9fbfcff331b4f5e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:af:72:a1:51:70:1c:b5:ce:e5:31:c3:46:
                    e9:e7:33:f0:21:80:21:8d:47:41:64:28:e2:16:a8:
                    0c:8f:d5:85:f3:5b:47:77:a2:00:2e:03:67:11:5e:
                    8e:8f:0a:b3:2b:01:9f:f3:fa:24:91:40:1b:bc:44:
                    b7:03:b4:b6:5c:3e:e3:49:1a:45:02:3d:4f:1c:98:
                    b3:ad:75:5d:21:7d:56:62:55:a7:e3:3c:58:b7:ec:
                    95:d6:7c:ce:ad:20:2b:a2:d8:7b:c0:1a:10:cb:1b:
                    23:7a:c2:ec:ed:7b:b1:f9:2c:1d:4c:fd:a2:29:30:
                    30:c4:57:45:38:81:75:56:b5:dd:96:fe:f1:00:3f:
                    6c:25:6d:34:94:c9:f2:8e:66:d7:a9:89:12:b1:34:
                    6d:f3:b9:75:bb:26:04:ed:59:80:ec:5b:08:40:e7:
                    b2:b4:40:5a:cd:3b:13:39:2f:2b:07:c9:5c:d9:66:
                    d9:c6:6b:32:ab:3f:a7:ed:c1:9b:89:ef:d4:68:df:
                    27:e3:76:34:52:1b:ac:b3:b3:c5:a5:e2:d5:fa:4a:
                    cc:ae:a1:7d:1e:29:22:b7:81:0d:40:32:c1:17:be:
                    ab:50:0c:f1:67:0e:36:ef:46:4b:47:d8:8c:ac:69:
                    57:a3:5f:6f:51:22:ac:a9:c7:3a:57:a0:a3:96:90:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:2A:75:94:B4:5F:8E:4B:34:B0:E9:FB:FC:FF:33:1B:4F:5E:49
            X509v3 Authority Key Identifier:
                keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:04:54:9e:8d:06:c5:2c:3e:be:95:7d:76:53:0b:b1:59:d5:
         76:f2:c7:78:23:c3:d5:46:95:26:94:97:6d:c6:f9:d9:26:06:
         65:9e:08:89:d8:9d:a9:41:19:53:d9:d6:a8:8c:7b:22:01:b8:
         ff:7d:63:a3:ab:79:d3:d2:d8:b0:b1:11:1b:fb:2c:12:ab:9d:
         0d:fe:da:bc:1e:50:10:0c:8d:fc:91:d4:d1:74:80:0a:5e:f4:
         03:fa:dc:e0:3a:58:c5:1d:67:7c:e6:e5:98:64:c0:e0:cc:af:
         cb:52:7f:43:a4:f7:5a:7f:60:b1:07:62:67:8a:97:21:ab:dc:
         90:e7:3f:01:67:81:ec:a0:0a:f0:cb:1a:4e:5a:12:df:d5:7b:
         29:20:9c:7c:8e:1d:c9:48:4f:7a:ec:bc:1c:90:78:2b:69:50:
         87:ec:8f:ef:14:32:6d:a1:a5:51:57:99:f8:64:0c:b6:38:50:
         bb:b9:8b:85:32:5f:00:cf:6f:5e:59:e8:9a:df:2f:f5:bf:8a:
         2a:23:bf:f6:53:78:a3:db:fc:78:1e:ed:1a:82:13:99:31:89:
         0f:d2:75:36:eb:da:40:a8:1d:1b:46:71:b3:8b:8a:22:ac:5f:
         3f:ae:e2:44:a0:40:56:e3:6e:40:ef:9b:91:4d:e6:37:e5:8d:
         c6:00:a3:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBmayLJHDM5bB1qhQIjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZWU1YzFjODA0YzMzZmRlMzNkOWIwOGI5MTlmNzNkMzFk
MGI2ZDkwHhcNMjUwNDEzMTQwMDU5WhcNMjUwNDE0MTQwMDU5WjAzMTEwLwYDVQQD
EygxNmQ0MmE3NTk0YjQ1ZjhlNGIzNGIwZTlmYmZjZmYzMzFiNGY1ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB2vcqFRcBy1zuUxw0bp5zPwIYAh
jUdBZCjiFqgMj9WF81tHd6IALgNnEV6OjwqzKwGf8/okkUAbvES3A7S2XD7jSRpF
Aj1PHJizrXVdIX1WYlWn4zxYt+yV1nzOrSAroth7wBoQyxsjesLs7Xux+SwdTP2i
KTAwxFdFOIF1VrXdlv7xAD9sJW00lMnyjmbXqYkSsTRt87l1uyYE7VmA7FsIQOey
tEBazTsTOS8rB8lc2WbZxmsyqz+n7cGbie/UaN8n43Y0Uhuss7PFpeLV+krMrqF9
Hikit4ENQDLBF76rUAzxZw4270ZLR9iMrGlXo19vUSKsqcc6V6CjlpB4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbUKnWUtF+OSzSw6fv8/zMbT15JMB8GA1UdIwQY
MBaAFPfuXByATDP94z2bCLkZ9z0x0LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMt
ZTA4ZDUzZjA5NjEyLzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMtZTA4ZDUzZjA5NjEy
LzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOARUno0G
xSw+vpV9dlMLsVnVdvLHeCPD1UaVJpSXbcb52SYGZZ4IididqUEZU9nWqIx7IgG4
/31jo6t509LYsLERG/ssEqudDf7avB5QEAyN/JHU0XSACl70A/rc4DpYxR1nfObl
mGTA4Myvy1J/Q6T3Wn9gsQdiZ4qXIavckOc/AWeB7KAK8MsaTloS39V7KSCcfI4d
yUhPeuy8HJB4K2lQh+yP7xQybaGlUVeZ+GQMtjhQu7mLhTJfAM9vXlnomt8v9b+K
KiO/9lN4o9v8eB7tGoITmTGJD9J1NuvaQKgdG0Zxs4uKIqxfP67iRKBAVuNuQO+b
kU3mN+WNxgCjDQ==
-----END CERTIFICATE-----