Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File:                     m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier:          BXq+FE1LuA/PLmAnhjZKRsVmNRrajC0MJjp0Rp+je+A=
Subject key identifier:   52:13:6A:F3:06:75:A2:6A:A1:A0:DA:FB:0D:A6:44:45:43:2E:6E:74
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer:       /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial:       01962E618D692CE5E2027731BFC59A9FCC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number:          092E
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
                          2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
                          3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: uQD/H19ouZjjes4zo4GnGlt8mov6BsFk9k38GKLrYqw=)
                          4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8d:69:2c:e5:e2:02:77:31:bf:c5:9a:9f:cc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=52136af30675a26aa1a0dafb0da64445432e6e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:98:45:d2:58:8a:fd:41:d4:c9:36:28:e1:
                    da:76:ef:82:5b:30:2a:8f:af:17:1b:00:47:c9:b0:
                    2b:70:b8:bf:2b:2b:32:c2:d5:60:fa:c8:75:f0:14:
                    28:82:12:17:a7:97:03:d3:bb:df:a4:bf:5d:46:5d:
                    59:78:e0:53:0d:7c:54:aa:92:1c:6c:6e:72:94:01:
                    29:79:9b:42:b2:96:73:e2:36:8c:b7:4c:a9:44:67:
                    01:13:51:c4:71:7b:58:f8:50:45:14:4b:5d:13:55:
                    11:e6:80:79:2a:44:7a:d2:43:cc:fc:d3:4b:58:86:
                    c9:bd:7f:31:62:fc:ae:46:f0:f8:0d:3b:19:be:7e:
                    8c:e6:66:07:78:ac:6a:ea:c0:fa:f6:cc:f3:46:8e:
                    a7:27:35:c5:02:4c:b9:0c:0f:13:33:8c:88:93:02:
                    aa:df:bc:76:ba:4e:d8:cf:cb:66:9f:89:41:d5:24:
                    b7:cf:9f:22:f2:ff:d0:ae:a3:f6:17:78:e8:33:63:
                    79:61:ac:e1:52:ac:94:82:8a:a1:4a:3b:b3:e2:86:
                    9e:4a:d2:9c:25:71:5a:9a:6a:96:9a:43:83:dc:e1:
                    8a:69:77:c9:f3:9c:7e:08:d3:f0:62:80:02:0f:b7:
                    31:96:3d:fa:21:04:6f:18:90:78:79:a0:d3:61:ca:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:13:6A:F3:06:75:A2:6A:A1:A0:DA:FB:0D:A6:44:45:43:2E:6E:74
            X509v3 Authority Key Identifier:
                keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a7:16:c2:e8:cf:50:39:4c:e8:aa:57:6d:cc:75:26:21:18:
         2b:fa:2e:6e:43:86:5d:35:6c:3f:4f:c9:4c:52:57:2e:f3:0f:
         7f:3d:99:94:2b:ed:78:5d:aa:f5:69:a4:cb:c9:7c:03:6a:76:
         84:e6:f9:29:7c:48:44:8c:41:78:c5:0b:06:7b:be:06:b6:50:
         71:69:11:32:e8:33:60:af:58:c2:7f:7a:50:fc:07:e3:a6:ff:
         dc:21:ac:3c:37:bd:1a:e3:fb:2a:26:b9:7d:85:cd:0f:4c:5f:
         ca:ed:c2:0f:7a:69:62:51:a0:47:dd:d2:a0:8c:bb:8e:3c:db:
         83:6e:02:3b:e8:6d:0c:46:e9:9b:4c:49:b6:65:80:8e:06:8c:
         84:e6:4d:82:0f:33:e1:c9:c7:d4:b5:03:07:d4:2e:bb:a1:df:
         50:ea:e8:b3:b7:13:a8:4b:23:58:ef:66:59:19:22:d1:cf:da:
         6e:c2:90:98:12:47:87:74:04:c3:5c:f1:de:03:ca:41:08:3e:
         bb:d9:6d:b6:8b:eb:7a:1c:e4:b6:5e:7d:4c:77:2a:78:ac:84:
         52:1f:76:d9:55:ed:8d:4a:3c:5a:63:13:8a:a4:d6:53:34:67:
         32:f7:5f:2f:c5:0e:e2:83:a6:65:a5:13:86:d8:7b:a2:25:c8:
         d6:fb:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----