Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
File:                     x9uZhsBTq3lIoSw9DITO65Om1j0.mft (raw, json)
Hash identifier:          mxZq+7UgDZZZZkalunrQCKIyBfZLv9faKv1G1c1SyGM=
Subject key identifier:   48:0E:22:CD:64:7D:70:44:1D:8F:2A:A7:07:18:6A:EF:14:1F:59:DE
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Certificate issuer:       /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial:       01962E987CEF2863068B02440AC5571B7715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa (hash: DBiwTIAVoLlTcU9IX3rDmcOWHkGERlsL2UhqGoUcwKc=)
                          2: x9uZhsBTq3lIoSw9DITO65Om1j0.crl (hash: GxWKwk9OKfgJmYz7sPCTg702NxXICH8zhu5VhrxI35E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7c:ef:28:63:06:8b:02:44:0a:c5:57:1b:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=480e22cd647d70441d8f2aa707186aef141f59de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:ed:97:f6:db:5b:6e:09:64:42:3c:3a:22:
                    ad:66:60:b9:04:0a:60:64:8e:75:ab:77:71:2f:4c:
                    27:19:83:50:72:eb:6a:a2:17:07:de:4f:11:04:aa:
                    0f:51:82:b3:ad:1a:21:7a:45:36:6c:11:c3:de:04:
                    02:a7:ac:68:5a:39:06:f6:bc:b5:1c:94:1e:a3:46:
                    7d:88:6e:d4:3b:24:8b:f3:eb:a5:7a:29:e0:e1:4d:
                    3d:21:68:c1:93:79:42:74:5c:e0:72:1f:69:86:a8:
                    3b:08:85:7e:6c:03:56:f4:a2:c2:93:97:c0:e9:33:
                    25:7b:f7:a6:da:08:a1:10:b3:0e:db:94:28:1e:b1:
                    04:61:93:d0:82:6b:d2:9a:d0:68:61:aa:0e:eb:0c:
                    9b:01:d5:3e:c1:85:03:0c:62:59:ac:9e:10:13:e5:
                    3c:b4:27:f8:73:21:08:6b:b8:2a:2c:3b:4c:2a:65:
                    42:c4:99:ea:e3:ed:d3:64:2f:7c:3d:4d:9f:b0:fb:
                    ad:6c:4b:4e:68:a7:80:91:4f:26:2f:f1:e2:5b:fc:
                    74:f1:1d:e2:ee:52:5c:f9:d6:c2:30:f1:69:3c:99:
                    ac:42:80:f9:e5:a0:9c:14:04:c5:89:82:cf:f5:e2:
                    45:92:5a:ae:7b:fd:86:14:07:77:40:19:83:2f:4d:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0E:22:CD:64:7D:70:44:1D:8F:2A:A7:07:18:6A:EF:14:1F:59:DE
            X509v3 Authority Key Identifier:
                keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:04:db:62:7a:0d:8b:7b:09:64:c0:ac:a8:09:20:fb:35:
         74:be:53:dd:9c:68:de:cb:e3:79:2a:d9:fe:d5:59:63:c3:b6:
         29:87:b5:3c:1a:83:4a:29:20:da:c8:91:ae:a6:12:e5:22:2f:
         6c:9c:cc:4c:49:ea:e3:de:49:06:1c:06:0e:d7:87:7d:d1:3d:
         d6:9f:b2:2e:42:c7:8d:a4:b1:be:40:20:33:37:b1:e2:15:e7:
         12:3f:0d:fe:5c:6b:c1:35:8f:00:d3:d5:ee:bc:37:91:55:3b:
         af:fe:9c:da:27:b0:a1:02:7d:3d:af:f0:58:e6:f8:4e:58:ce:
         fc:e2:86:b3:c8:c2:34:5e:36:69:97:f5:ab:b1:d1:41:b0:36:
         e1:5c:b8:ad:f3:0c:71:ef:d3:7b:ac:78:af:4c:78:6b:21:a7:
         44:28:18:9a:05:a2:16:77:cf:dc:95:be:11:75:19:8f:39:6d:
         30:01:e6:fa:17:5d:5f:8d:1d:c7:17:5c:ef:b9:8f:f8:e4:ff:
         0a:a9:7e:a1:6e:2c:64:e3:9d:ff:de:a8:92:9d:bd:a9:aa:e0:
         c8:87:85:dc:f8:fb:52:6b:83:b2:6a:c6:70:8f:c6:d0:d6:72:
         6c:00:31:8a:34:7c:9c:96:01:ff:fd:e0:c5:17:8b:6f:4d:8b:
         87:36:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----