Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File:                     9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier:          wArsBD5HYxdpIud885ipgI0OmkTrg/hLHkEHncA0FvI=
Subject key identifier:   37:39:E3:06:F6:BB:9E:D1:C6:87:D3:F7:F3:A8:C8:6E:EA:5B:72:F3
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer:       /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial:       01962DF44C772BEC38A27FC4736A64EE9D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number:          0C06
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: 3pcWd9I6BaqvRVp1nIwc6C0CLQCD26wWRj8lPKChzCA=)
                          2: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (hash: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:77:2b:ec:38:a2:7f:c4:73:6a:64:ee:9d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=3739e306f6bb9ed1c687d3f7f3a8c86eea5b72f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:16:a9:2f:55:b8:36:69:25:f0:ac:dd:7f:
                    b2:f1:db:05:68:e0:cf:6a:3b:90:d9:ca:46:17:bf:
                    55:72:ca:36:ad:bd:ac:18:99:e3:63:da:35:ff:b5:
                    19:69:99:42:10:3c:82:83:93:97:5d:29:af:b4:db:
                    1d:c7:d0:2f:0d:87:b1:9c:a9:95:b2:a2:72:50:00:
                    56:9b:e1:9c:3b:2e:e4:76:fc:38:8e:d4:84:05:48:
                    7f:92:f4:b7:a6:cc:5f:8a:52:c3:72:67:93:c7:af:
                    ba:43:27:85:e8:4b:69:a2:19:fe:8d:e4:bc:6a:b5:
                    d4:94:15:aa:38:96:13:9c:cc:9e:19:f4:62:69:4b:
                    e1:be:ca:29:1f:b7:e2:6e:39:8c:c5:70:5f:35:f2:
                    f7:dc:ff:e2:f6:3e:e8:1d:ea:3a:33:bf:ad:96:82:
                    86:a4:05:eb:5a:b6:af:ed:bd:75:73:ad:09:bc:23:
                    00:cb:70:ea:ae:6f:66:ea:c8:78:46:5d:b1:33:9a:
                    b5:f5:40:81:b3:a9:00:d9:cc:51:c7:5c:13:56:b7:
                    25:7f:30:52:4c:9b:6d:bf:27:02:73:65:46:30:0f:
                    46:d6:45:c5:8e:13:89:00:53:c7:75:60:d2:48:d0:
                    f4:fd:1c:c1:35:cb:e5:7d:bf:4d:07:ed:0c:e0:d7:
                    8d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:39:E3:06:F6:BB:9E:D1:C6:87:D3:F7:F3:A8:C8:6E:EA:5B:72:F3
            X509v3 Authority Key Identifier:
                keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:40:ed:80:18:94:e2:98:c4:2f:16:31:86:4b:0d:e2:96:e4:
         cb:ab:27:38:0d:77:bc:64:1d:46:ab:4f:95:07:9d:53:b8:cf:
         a6:86:6f:e9:16:da:d8:9c:60:5d:9b:7b:ee:eb:ec:90:bd:b3:
         08:9f:06:85:dc:f7:d4:68:df:ea:8a:32:e4:76:0f:e5:26:79:
         60:82:c5:c4:57:ec:ee:9f:65:c9:b4:3c:55:94:01:71:75:f7:
         7a:ff:68:e1:46:ac:ee:2a:f1:11:c5:1b:73:88:c6:99:34:9a:
         93:eb:f7:63:cf:ec:e1:60:76:f4:58:c6:a1:f0:91:04:7b:78:
         ac:bb:1e:3f:b3:28:28:ab:a5:19:e3:86:3d:9c:00:85:0a:60:
         7a:2b:f7:8d:d8:8b:d9:92:1f:a0:2f:fa:fc:8f:d2:5b:eb:f3:
         8b:3d:6c:ec:03:49:56:35:71:8e:45:56:2a:0b:09:a4:19:59:
         b4:ae:51:15:8e:ac:af:a8:66:66:18:f6:11:82:7a:52:f7:5d:
         8d:da:f3:e3:55:09:cf:49:04:81:ee:ed:b1:ab:27:5b:23:52:
         43:ae:1e:c4:79:fb:61:b5:ca:ad:df:7e:db:83:b8:cc:c5:67:
         5a:a5:37:bb:9a:de:94:2d:81:70:99:96:a6:39:e0:e2:22:7e:
         d2:a9:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----