Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File:                     9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier:          rMtNeeUPUy0CEpc2RS6HvXsltIhyHRFkSrvZIBhtzHw=
Subject key identifier:   22:6F:B9:87:48:04:10:7C:4D:46:88:93:3F:A3:72:22:32:C3:57:20
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer:       /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial:       01962E995C6FA602C918E374B64BA29EF752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number:          08B4
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: +WMGR5hsfaDWn21rt8JRro08EhgcFpzA2Ylgd9J8cfY=)
                          2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:6f:a6:02:c9:18:e3:74:b6:4b:a2:9e:f7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=226fb9874804107c4d4688933fa3722232c35720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:21:89:8f:4f:70:70:3b:e8:87:22:47:a6:
                    33:a2:d2:0c:72:d6:87:1f:f1:78:17:91:31:d9:32:
                    00:19:7d:75:6f:3b:06:18:76:67:0a:4f:47:80:ae:
                    be:ec:af:49:b1:b7:db:f2:69:40:1f:3c:a8:44:e5:
                    86:29:c0:dc:45:d3:c7:59:b7:2f:97:7b:8e:0e:6c:
                    17:df:f8:01:40:56:aa:83:1f:13:45:79:a8:16:7a:
                    5e:b1:a9:fd:c6:9a:e2:db:01:ec:cf:4d:12:9d:44:
                    42:2f:ef:f6:ef:db:c3:e5:ae:2f:89:8d:c0:b9:6e:
                    67:29:9f:c6:b4:39:95:ed:d0:e7:ce:b7:18:70:a6:
                    e2:7a:00:e6:a9:d2:5e:1a:71:4c:14:d6:6b:79:6c:
                    e9:d4:18:9b:47:90:f1:f1:95:c7:bf:10:08:cc:9d:
                    7c:e4:89:fe:44:77:b7:79:93:70:66:f5:c4:fa:24:
                    db:52:67:4a:55:2d:47:2a:78:1c:12:ff:7d:b5:a9:
                    de:27:aa:ce:aa:21:3b:35:30:74:7e:78:dc:aa:fc:
                    a6:88:fb:e0:59:2e:fd:ad:c0:73:9f:bd:11:16:3d:
                    4f:93:4e:f8:7c:df:d7:4b:dc:ed:51:49:4b:79:1e:
                    ec:fa:e7:4a:c3:fd:29:99:d5:61:ad:e5:75:d4:c6:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:B9:87:48:04:10:7C:4D:46:88:93:3F:A3:72:22:32:C3:57:20
            X509v3 Authority Key Identifier:
                keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:61:37:62:fc:1f:1b:da:ee:59:e7:05:75:85:cf:6a:5f:3d:
         eb:b6:27:e1:3f:b6:31:ba:07:b8:b7:30:95:6c:98:3d:74:dc:
         2d:e5:20:7f:c4:b3:e2:26:4c:d7:6d:f3:f1:a1:9a:0e:b4:32:
         64:eb:86:f6:22:9d:16:4e:89:d6:e4:e0:81:2f:91:60:27:3e:
         e9:52:78:a7:35:df:14:eb:4d:e0:f9:2b:90:3e:17:83:e8:c3:
         91:b4:6b:e4:ce:53:37:d4:d2:cb:3b:a5:60:27:a8:a5:d2:90:
         da:95:42:9d:32:12:1c:4d:15:ad:8f:37:c9:5b:13:a3:54:5e:
         e4:a5:c8:1d:be:b8:6f:78:6b:fb:eb:1b:7e:f7:34:fc:44:54:
         db:4d:c8:96:b5:fc:13:8f:ce:06:3c:78:c8:63:61:c5:a6:c9:
         ac:aa:27:fc:76:4c:f2:a1:1b:96:fa:ad:48:4e:6f:fa:dc:8d:
         d4:b8:13:74:37:d0:e7:a3:43:0b:3f:5b:db:ee:f2:d0:16:d6:
         03:25:91:2a:5c:5b:05:73:6d:5c:99:45:f6:20:cb:d9:58:72:
         23:12:c5:b2:fb:e7:3d:77:7b:2d:2d:06:11:6e:f9:82:fb:39:
         aa:c3:d7:b5:01:23:42:41:6a:91:d8:df:4f:3f:49:97:cf:5b:
         ef:55:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----