Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File:                     9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier:          k7Xu+TV0mXhf2+wRG6FsBSOJ1L7WslHcLJ5Gjo504fw=
Subject key identifier:   D6:0F:CA:AB:DB:68:37:6D:B8:27:22:8B:C7:C6:C4:4C:50:7C:44:5D
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer:       /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial:       01962FAB1DB177B02C0D9A7D7FB079E279C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number:          0927
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: bczbHAOZlD70DQhl5PAebz2ubS6nPoYXyukbvUP1ktc=)
                          2: t-NTnv2Ro8nWywZwXpvfbvg95_c.roa (hash: nKK6UB3Rz/fAFcSsBek32u+mXGAo3Dx3MPDp3oR/j+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1d:b1:77:b0:2c:0d:9a:7d:7f:b0:79:e2:79:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=d60fcaabdb68376db827228bc7c6c44c507c445d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:00:a4:f3:5b:a6:27:f0:b2:6d:f0:6b:00:
                    e2:d4:cb:cf:19:2b:48:f6:d2:42:29:23:d8:49:66:
                    f9:ee:0c:af:10:4b:04:43:a7:10:3b:ce:e6:15:c7:
                    5f:f5:d2:c5:de:75:40:fa:79:23:ab:68:b4:b1:f4:
                    67:e1:87:bc:53:2a:79:94:da:95:a8:1b:33:5d:6f:
                    c5:44:fb:02:f7:0a:f0:00:62:37:9b:77:22:30:a9:
                    8f:a1:6f:bd:33:21:24:53:b4:64:62:23:ec:6a:9b:
                    b5:bf:72:0c:5d:08:d7:ae:17:af:39:0d:7a:8d:48:
                    da:8f:2e:75:0e:39:d9:38:d8:23:88:74:30:fa:6b:
                    d4:f6:bc:5d:66:cf:94:ef:eb:9a:8d:11:a5:1d:3b:
                    a3:9c:d0:fd:3e:8f:23:f6:32:61:9c:ac:96:25:4b:
                    c0:3c:42:0b:f8:df:41:e4:69:7d:77:e3:ad:d8:fc:
                    8e:e2:60:00:ab:ff:97:5e:2d:45:3c:b4:9a:de:5f:
                    7b:b8:28:e2:aa:4d:38:54:46:ce:0c:ad:eb:68:a5:
                    ef:81:57:e8:19:8e:df:75:56:27:73:da:ae:26:a9:
                    c0:ee:06:99:90:f8:4c:3d:42:cf:2a:3f:c9:a5:67:
                    fc:74:fd:3c:14:65:6a:0b:7d:09:f3:25:f1:1f:eb:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:CA:AB:DB:68:37:6D:B8:27:22:8B:C7:C6:C4:4C:50:7C:44:5D
            X509v3 Authority Key Identifier:
                keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b7:83:57:7e:c7:d9:5a:f6:86:4d:c3:e6:c7:a7:90:41:c1:
         ba:65:d1:33:28:32:d2:1a:b2:90:df:7e:6e:b3:81:45:06:8c:
         72:e1:9c:35:b7:04:f9:c8:2e:36:fb:c0:b6:7c:cb:ea:24:ce:
         72:6f:7e:c9:bc:32:b3:e3:50:59:bd:de:61:3a:54:b4:04:9b:
         cc:61:16:2e:68:6f:27:d1:cd:84:d3:e1:b2:8b:db:2a:27:f5:
         f0:4d:a0:65:00:87:93:e7:79:99:dc:13:8a:cd:76:ee:ca:ce:
         a6:9f:7d:77:36:58:8b:65:88:d7:35:ab:c8:6c:bf:7e:3b:4c:
         0c:33:e8:44:cb:da:32:d8:33:29:53:ef:37:bf:2b:8e:9e:3f:
         94:38:b2:09:38:3c:6b:9f:51:cc:4f:0d:74:bd:89:96:81:d7:
         89:05:e9:6c:11:3d:41:bc:37:17:32:e5:31:30:e2:a1:2c:3c:
         82:22:17:88:38:e0:5b:43:c8:e8:d0:01:01:4f:c5:59:82:77:
         dc:32:83:87:e8:0f:9e:46:b4:76:27:3d:79:b8:b0:bd:67:9c:
         62:f6:05:44:94:ac:83:20:a9:4a:9f:bd:ad:42:1c:11:ce:68:
         d1:a7:f0:1c:e6:39:ee:58:ce:29:a9:63:b5:c0:fb:3e:96:d3:
         6d:28:3b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqx2xd7AsDZp9f7B54nnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmUwZTU1ZTVjNWEzMGVjMDRiZDZkYzQ2ZDE1NGIzZTRi
N2I1ZjUwHhcNMjUwNDEzMTUwMTA1WhcNMjUwNDE0MTUwMTA1WjAzMTEwLwYDVQQD
EyhkNjBmY2FhYmRiNjgzNzZkYjgyNzIyOGJjN2M2YzQ0YzUwN2M0NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbYApPNbpifwsm3wawDi1MvPGStI
9tJCKSPYSWb57gyvEEsEQ6cQO87mFcdf9dLF3nVA+nkjq2i0sfRn4Ye8Uyp5lNqV
qBszXW/FRPsC9wrwAGI3m3ciMKmPoW+9MyEkU7RkYiPsapu1v3IMXQjXrhevOQ16
jUjajy51DjnZONgjiHQw+mvU9rxdZs+U7+uajRGlHTujnND9Po8j9jJhnKyWJUvA
PEIL+N9B5Gl9d+Ot2PyO4mAAq/+XXi1FPLSa3l97uCjiqk04VEbODK3raKXvgVfo
GY7fdVYnc9quJqnA7gaZkPhMPULPKj/JpWf8dP08FGVqC30J8yXxH+vTzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYPyqvbaDdtuCcii8fGxExQfERdMB8GA1UdIwQY
MBaAFPYuDlXlxaMOwEvW3EbRVLPkt7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQt
MTkyY2IzNjk0MjNmLzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQtMTkyY2IzNjk0MjNm
LzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7eDV37H
2Vr2hk3D5senkEHBumXRMygy0hqykN9+brOBRQaMcuGcNbcE+cguNvvAtnzL6iTO
cm9+ybwys+NQWb3eYTpUtASbzGEWLmhvJ9HNhNPhsovbKif18E2gZQCHk+d5mdwT
is127srOpp99dzZYi2WI1zWryGy/fjtMDDPoRMvaMtgzKVPvN78rjp4/lDiyCTg8
a59RzE8NdL2JloHXiQXpbBE9Qbw3FzLlMTDioSw8giIXiDjgW0PI6NABAU/FWYJ3
3DKDh+gPnka0dic9ebiwvWecYvYFRJSsgyCpSp+9rUIcEc5o0afwHOY57ljOKalj
tcD7PpbTbSg72Q==
-----END CERTIFICATE-----