Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File:                     v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier:          1QzNniknBhvaT+DkyP3Pzndotx+9/pc3ukhv1wzxshc=
Subject key identifier:   21:C3:AC:88:38:3C:30:F8:6F:12:E0:81:3A:43:2C:26:4B:F2:A5:22
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer:       /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial:       01962E9886498E4873F901F5CD7BD8193BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number:          106E
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
                          2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: gJTwYofLb3+/ytrCOIEtOd9sJF9hoTD9WY7kUZ3MSb8=)
                          3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:86:49:8e:48:73:f9:01:f5:cd:7b:d8:19:3b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=21c3ac88383c30f86f12e0813a432c264bf2a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:94:7c:6c:ef:5f:a2:70:0a:15:7f:19:6c:
                    3d:ae:85:e2:e5:db:f0:f8:41:21:10:3d:98:f3:c6:
                    8c:fa:90:60:42:e6:e8:b9:c1:bf:34:2c:32:39:67:
                    d1:7f:0a:88:05:e3:7b:5a:be:89:48:d2:be:4c:0d:
                    35:22:af:83:36:24:7a:73:f5:bd:63:07:16:37:e7:
                    1e:33:71:c2:0f:ae:3d:a7:d2:e6:96:4b:af:2e:93:
                    34:a7:f5:15:c4:5c:9a:4f:33:46:80:ad:9b:74:86:
                    7f:fe:81:f4:88:cd:90:32:20:73:3d:18:a7:4d:b4:
                    e3:fe:cb:df:fe:1c:33:ca:36:fa:c1:b2:c7:69:97:
                    0d:ed:6c:ea:ae:ab:ba:34:8e:48:00:c4:bb:72:b8:
                    5f:2a:28:6b:a1:b7:b8:ba:25:87:1f:2b:6e:ec:53:
                    23:87:e4:af:09:b1:f0:b7:87:a6:db:f9:e5:63:86:
                    03:69:b9:e4:4a:8b:b9:af:25:1b:82:25:16:bd:63:
                    c0:9f:4d:63:1a:a4:63:3d:c6:8e:85:7f:f2:e0:ca:
                    f9:25:42:fc:28:43:ee:a7:66:03:fa:ba:34:fb:7b:
                    4e:94:98:cd:01:d0:8c:d6:b2:db:fb:1b:cf:37:64:
                    ad:ec:0c:db:4d:bc:ef:1b:b6:4a:f5:4f:a1:ee:00:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:AC:88:38:3C:30:F8:6F:12:E0:81:3A:43:2C:26:4B:F2:A5:22
            X509v3 Authority Key Identifier:
                keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:c1:84:27:67:65:75:48:7c:35:a8:e4:8c:36:f9:b7:0b:
         9e:47:38:c9:1d:05:c2:bd:48:aa:37:eb:49:18:ab:40:d5:0b:
         08:b6:18:6c:11:d8:ff:4b:c2:cf:d3:03:86:47:f7:ae:b6:40:
         9b:b4:5c:43:88:c1:da:bc:7d:08:45:99:64:b6:61:4c:85:3a:
         aa:67:f6:ff:57:2b:ce:1f:0d:ec:17:0e:74:02:3a:b2:b0:97:
         50:3d:bc:48:e0:69:7e:72:1c:a9:ae:ca:4a:7e:6b:59:f5:38:
         b2:55:58:5a:ea:e5:3a:63:2d:36:3e:40:d5:e7:6d:4b:70:d0:
         fa:16:62:92:e8:21:38:f1:f6:b7:79:d0:fb:70:b3:7b:df:49:
         48:1f:a0:f5:c5:26:66:a2:85:66:b6:ca:a9:e9:c5:28:8e:75:
         a6:84:42:7d:05:4c:7f:a1:b3:93:7b:97:b5:d4:95:1c:3a:dc:
         39:e1:d0:43:7c:c8:39:15:5f:da:f0:df:3e:60:b3:33:4e:63:
         9e:1a:80:1f:5d:02:8e:1b:13:49:6b:8e:9c:fe:5c:96:cf:41:
         8e:92:68:97:2e:b3:e6:bc:ee:4e:db:79:16:f2:92:02:63:70:
         3b:4b:1e:c6:81:e1:1f:f9:c0:47:c1:17:12:9b:24:39:40:d8:
         6a:6e:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----