Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          5aX1F3+drxG6jgXFbEGEjuxFAszplangx91wH0o79AQ=
Subject key identifier:   C2:FC:E5:BF:FD:6C:C4:F7:1B:9C:56:F0:3C:FE:9C:65:A2:E2:F5:2C
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       01962F3D3E2A9A95DB3A77AF5F049AC3868E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: l4jYbCiujy+jFLDwCpIXfG1jQHn38Vk91yku75wRhFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3e:2a:9a:95:db:3a:77:af:5f:04:9a:c3:86:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=c2fce5bffd6cc4f71b9c56f03cfe9c65a2e2f52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:c7:e4:e0:19:79:c8:6d:12:1b:08:28:59:
                    2d:a3:2c:bb:dd:93:9a:8c:17:3c:31:dc:4b:5d:ac:
                    57:89:65:4d:7f:fa:f3:c1:5f:b9:c7:79:d7:e4:54:
                    b0:0a:0e:fb:0f:54:3c:d7:29:8a:5c:e9:e6:98:fb:
                    e1:a4:10:c7:a8:d2:6f:2b:5e:d7:9f:83:5b:f2:ff:
                    ca:73:75:1a:ca:9a:5d:90:67:5b:b6:33:1b:c5:7f:
                    97:b2:36:a1:40:56:55:70:d3:f9:15:29:e2:53:00:
                    f9:c4:9d:e8:81:f9:6f:06:84:90:32:d6:5a:5a:09:
                    bd:d1:61:86:97:93:63:b6:2f:d0:7c:8a:f5:b9:6e:
                    09:75:b4:9b:cf:96:b6:44:cd:97:14:69:c7:14:90:
                    59:83:99:08:1c:35:a7:09:37:d9:86:6d:84:8a:9a:
                    2c:a0:36:62:77:28:30:6e:a7:cc:70:30:6f:d9:2d:
                    cc:13:c4:53:b5:f2:ea:02:dc:32:f8:19:35:67:f6:
                    f4:cc:42:a3:e0:a2:a3:5c:2b:c7:61:67:81:d9:ab:
                    60:2b:2d:28:fa:75:e9:84:b0:d5:f9:e8:35:c0:ec:
                    aa:36:02:8f:b4:b2:67:c6:4f:33:c2:f8:36:62:62:
                    02:44:f1:4b:d5:6e:18:a7:4e:41:99:11:31:09:b3:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:E5:BF:FD:6C:C4:F7:1B:9C:56:F0:3C:FE:9C:65:A2:E2:F5:2C
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:23:99:b6:89:38:92:13:18:54:22:78:1d:63:34:e9:fd:51:
         5b:09:29:f0:44:72:db:fb:a9:cf:33:87:0b:ff:5d:b4:04:1a:
         33:0d:18:e6:82:f9:09:ff:47:be:88:cf:94:25:2f:4d:8c:4b:
         b3:e9:aa:e4:21:4e:a6:3f:51:19:14:d1:80:a6:8f:1d:bc:a8:
         21:c3:19:74:64:c2:8a:d3:10:cf:de:95:77:7e:4e:38:09:c8:
         6d:a0:4c:9d:ef:ef:26:0e:89:a2:43:92:aa:f2:f4:d9:dc:fd:
         d4:53:0d:45:bc:a2:01:a5:02:e3:3e:50:83:6a:60:21:f2:44:
         22:14:c9:7c:9d:d1:30:1e:9d:9a:20:e8:2a:d4:c3:80:65:f4:
         b3:7b:29:f9:2a:c1:71:6c:41:c4:a8:37:ca:7e:e9:4f:df:c9:
         ea:6d:9b:7c:11:17:63:58:8a:ed:c0:48:03:4f:fc:7e:fe:ff:
         4b:47:16:2d:05:10:a0:ec:a8:88:ad:5e:bc:47:47:df:e5:0d:
         af:c9:89:d1:3c:36:66:be:b6:bd:96:bb:03:30:0c:99:05:c8:
         84:c5:17:bd:e1:99:a9:ce:7e:93:84:1a:1b:ca:43:32:c1:85:
         be:a3:44:66:60:cc:22:a5:a8:ed:c3:bf:09:65:fc:88:1d:07:
         5e:c3:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----