Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File:                     9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier:          8dVj6orGy3xsT0Ep5Wk38dUg/K2QkFQSeF/iawn/ljk=
Subject key identifier:   0D:CF:8B:B9:34:E8:35:A2:F3:A4:1E:B8:B2:7D:63:28:AE:C5:B8:68
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer:       /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial:       01962E2ACD78B6DD30138F78D70EC64B4641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number:          095E
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: h/5qL5I4DiRsMDmgyZgIXt9+123fzaAiI6FhG8LHFO4=)
                          2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:78:b6:dd:30:13:8f:78:d7:0e:c6:4b:46:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=0dcf8bb934e835a2f3a41eb8b27d6328aec5b868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:46:9f:2a:92:5f:a4:e8:ee:54:68:a0:60:
                    d9:c3:c6:be:79:5c:89:cb:92:f7:f2:04:b6:aa:d3:
                    e1:3a:9d:f3:e0:7d:9f:d4:fd:d6:e1:4e:3e:ae:ca:
                    64:d4:6a:a4:4c:5f:5c:79:66:95:19:55:4d:20:c2:
                    41:3a:ea:54:72:26:9b:63:4b:d4:3f:66:3f:0d:20:
                    0f:d9:54:7c:16:cf:0b:c9:97:cc:90:df:b2:94:b5:
                    fa:17:a0:5e:91:f9:31:d0:86:8c:e0:bd:b1:b8:41:
                    19:6e:dd:3a:b8:10:8f:87:d8:da:7e:f8:cd:d9:c3:
                    28:a8:6c:2f:56:a7:66:66:f9:67:5b:83:64:ea:79:
                    56:8d:00:01:40:00:4d:2f:05:a5:f2:ec:fd:21:d4:
                    ef:be:b0:e4:ee:48:d3:d1:f3:dc:a7:1a:d8:43:f3:
                    1a:af:82:7e:d9:0d:c2:89:98:fa:b2:2b:1c:fc:96:
                    61:dd:37:14:55:98:20:2d:3b:c0:69:1b:9d:1a:86:
                    b0:ce:27:45:27:93:50:ab:4d:8e:17:c6:67:e7:a0:
                    66:09:25:9b:9d:bd:e8:95:ea:bb:77:b8:dd:c9:30:
                    10:f1:ee:39:ff:30:00:e2:7c:76:2b:95:4c:d1:56:
                    7e:6b:54:c7:6a:96:b6:cd:43:c0:8b:a1:49:c9:fd:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CF:8B:B9:34:E8:35:A2:F3:A4:1E:B8:B2:7D:63:28:AE:C5:B8:68
            X509v3 Authority Key Identifier:
                keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:ff:ef:5f:46:82:18:fb:e7:21:c6:fb:aa:de:ee:6a:28:
         35:38:d4:ba:8c:e2:d0:16:40:02:30:a3:99:22:da:3b:18:ec:
         e2:28:bc:9d:94:68:ab:18:43:a5:9f:30:93:e4:d9:d1:95:b7:
         5b:a6:ee:74:44:8e:ac:17:9d:ea:e6:f1:fe:7e:ff:2d:06:5a:
         fa:3b:7b:0e:a8:97:9a:aa:dc:4b:d5:e1:15:d9:69:be:fb:68:
         4e:67:3d:94:7a:73:cb:c0:9d:6b:03:74:ab:af:21:d9:48:86:
         ea:0c:59:71:58:49:5a:1d:e6:16:dc:02:60:5c:a6:58:02:8f:
         06:ca:56:f3:5f:3c:7e:d7:93:03:3e:15:66:14:4a:b6:83:9c:
         74:a0:e5:b1:27:54:38:df:fe:91:fc:26:94:6c:ef:6f:5f:03:
         ae:d2:55:98:64:06:e8:18:ff:3b:53:0d:ec:0d:d8:6d:4d:55:
         0f:3c:79:54:4d:d1:02:60:d9:8a:3c:12:25:61:0f:b5:aa:e5:
         57:87:7e:78:6b:ca:bf:ba:e2:05:43:4b:93:ba:d1:de:27:6c:
         4d:4d:58:fd:25:b0:bd:00:16:42:4c:28:69:f8:84:69:87:69:
         d5:e9:40:56:ca:8b:a1:d4:61:4f:c2:b0:b5:2f:33:02:b9:d5:
         a0:20:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----