Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
File:                     G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json)
Hash identifier:          YbLO6F8OYWwGVNVlNZoPKZ750sFvs6TnfFIL/3Vz7dI=
Subject key identifier:   10:42:FD:9B:DB:C4:B9:41:F3:63:70:0A:73:8B:D1:8C:A0:3A:5E:86
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Certificate issuer:       /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial:       01962F06739DCF1902515C436B45B2FD81F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
Manifest number:          0FC9
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 61pqBezJLAJE5VLA7yrYYgA1x4Q.roa (hash: wkbkRNJ1tewUM/PlCjzz6x80lWa3MJj4NI3f+PnCsBo=)
                          2: EpJyeK5l3AFsANhOcZBiUOqM9nk.roa (hash: jEvX43x9SqA5MKvP91NPr1LUmWhpxkfIrUnmrmVabWE=)
                          3: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: 5f0yoPDiY1bzUgUXa9MGe+xxbBKebg6PaksErJB5Rzw=)
                          4: XyfRuc4kupwWuvivIxyG_eB9gmg.roa (hash: KYzWwUCDT/C8f7tzUEGe7k72yVFrK9hL5A1TsIJ1sdw=)
                          5: jLqRq9df1G6zlawXTbhxNybx_aU.roa (hash: U7jgU6c2HeS0w5bhwmU3yd/cT+TakYFUUagP3qrZf9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:73:9d:cf:19:02:51:5c:43:6b:45:b2:fd:81:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=1042fd9bdbc4b941f363700a738bd18ca03a5e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:32:28:9d:aa:9c:4c:c5:56:8f:b3:d7:10:
                    f5:32:15:ae:4e:36:34:fc:f5:57:67:a9:75:b0:67:
                    07:07:47:05:9e:77:62:1a:9f:93:c1:4f:89:93:41:
                    cd:77:da:0a:1c:44:b7:64:57:01:43:88:61:16:ef:
                    03:a3:17:d6:45:55:66:82:0f:71:85:25:03:54:49:
                    a2:52:be:2f:82:24:e8:02:26:62:d4:2b:f2:d0:d3:
                    bf:cf:a7:f0:19:39:d8:e7:7a:5b:b8:65:3c:99:44:
                    5e:1b:c3:f9:df:cc:06:ef:e9:2e:9a:59:cc:54:86:
                    48:09:f3:ad:2e:0a:98:14:b5:2a:cb:b6:40:76:6b:
                    51:46:60:94:ac:45:fa:e9:61:cc:2f:3f:c7:db:5a:
                    c1:65:f3:07:38:97:e2:45:e1:44:dc:07:ad:6c:81:
                    7a:87:9f:32:f9:17:9b:14:fd:29:b1:36:31:43:47:
                    ba:7d:2c:59:07:81:2b:2f:4b:10:56:30:e7:b6:a1:
                    ac:f7:6b:24:61:36:72:e2:ae:05:a6:04:f6:f8:ea:
                    c6:35:12:a4:3e:55:cb:1e:88:9b:2b:ed:5e:ad:11:
                    1d:ab:75:46:4f:e8:a0:a1:ed:6d:f7:81:5a:45:15:
                    13:58:f5:65:ad:45:68:be:24:52:fb:30:c3:68:c6:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:FD:9B:DB:C4:B9:41:F3:63:70:0A:73:8B:D1:8C:A0:3A:5E:86
            X509v3 Authority Key Identifier:
                keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:74:32:27:28:28:0b:93:5e:7e:18:01:51:e0:f6:5f:d0:85:
         17:d5:0e:0c:68:f7:a5:38:86:79:ef:d4:63:8d:96:8c:32:7e:
         6a:bf:c3:b5:59:8f:72:d1:7e:79:59:0a:5a:e8:25:35:86:5e:
         05:be:cf:e7:b7:c9:38:8d:97:42:f0:01:5b:15:70:99:48:3f:
         03:88:73:64:3d:98:14:82:a2:0b:c1:0e:64:e4:77:53:36:93:
         05:98:f3:37:1d:10:b8:7d:07:ea:f6:df:b0:67:2d:d3:f6:0d:
         7d:f7:77:5a:63:73:c7:cf:60:27:0e:d5:14:4a:a6:51:bb:b2:
         a9:7f:9d:80:d4:6e:8b:10:95:e2:52:3b:10:a4:ee:e1:94:a3:
         e8:f9:1f:36:9c:06:a7:6e:50:63:f8:f8:3d:85:50:1a:9c:7a:
         63:cf:42:0e:fe:d1:30:d8:50:24:fe:6b:83:1e:d6:af:67:70:
         c8:52:be:63:02:a6:33:ab:05:8f:76:42:ff:84:71:8a:43:62:
         60:a8:48:5a:03:c3:b6:86:c4:b2:40:f6:52:93:dc:27:56:fb:
         1b:0b:b2:78:0a:84:5d:fb:a2:4f:05:f2:5e:9e:b1:4c:37:e8:
         c3:2e:ee:9c:bf:5c:64:2a:e7:7f:bd:f7:99:7e:36:bf:02:a5:
         52:9a:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----