Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File:                     g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier:          FFfEf55ZCZyYk7djHmAPTbsVZf4X6N0yS8+Nx48nF/Q=
Subject key identifier:   7A:D5:19:8E:FC:4F:9D:F1:0C:D4:EC:C9:4B:05:C4:CE:D5:F4:64:CB
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer:       /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial:       01962F06FF4DEF58B1B6FCC3B9C399439A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number:          10AB
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
                          2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: SnkKY/s+jwMmX50FL6mSrGcTETt5mBSfgGHuLUNxZZw=)
                          3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:4d:ef:58:b1:b6:fc:c3:b9:c3:99:43:9a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=7ad5198efc4f9df10cd4ecc94b05c4ced5f464cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:ec:13:64:7b:61:f8:d5:d5:3a:43:80:53:
                    54:67:1b:93:f8:71:c7:fc:ac:26:e6:61:c1:57:4e:
                    1f:1f:2a:09:37:a6:fa:e5:50:7e:ac:d4:a7:1b:07:
                    6b:6f:4e:77:fc:39:9c:c0:f0:ee:84:f7:7d:c7:cd:
                    69:52:57:20:f3:85:c7:df:d7:79:c6:0d:dd:c3:88:
                    49:a2:e2:ae:c8:9e:3e:34:87:00:c4:a5:42:87:8d:
                    fb:3f:25:b9:a0:56:2e:61:7e:45:73:df:1a:f7:e8:
                    76:b3:84:1b:59:1b:9b:a5:f2:6e:aa:0b:d1:b3:ea:
                    1e:20:a0:04:6a:2e:cc:7c:5a:fe:d6:ed:8b:db:2f:
                    d1:18:b7:4f:25:03:2c:28:39:2d:0d:15:70:8a:44:
                    b3:24:43:40:94:af:06:90:0f:81:a0:75:0e:75:d2:
                    38:ba:72:c4:fb:72:25:84:2a:af:84:73:30:7e:92:
                    42:3f:38:39:03:11:37:11:ec:05:08:64:08:0e:c9:
                    12:23:0c:68:47:29:c2:1a:fc:07:e2:46:4e:aa:9b:
                    3b:f3:90:63:18:06:56:ec:94:b9:97:21:93:8e:54:
                    41:d8:c5:36:fc:e7:a9:23:bf:d5:75:57:42:a7:10:
                    75:8e:03:04:85:f6:ba:7d:12:f0:65:b4:d2:b8:4a:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D5:19:8E:FC:4F:9D:F1:0C:D4:EC:C9:4B:05:C4:CE:D5:F4:64:CB
            X509v3 Authority Key Identifier:
                keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:84:4a:c9:58:04:1c:d0:b7:8b:e3:d4:dd:c6:86:6e:40:
         df:81:f6:6b:5a:3f:3e:e6:d5:ea:a9:7c:80:b2:6e:78:79:15:
         90:78:b9:e7:66:5c:f5:be:12:3e:52:e6:6e:fc:af:7b:dd:22:
         54:7a:fe:a2:db:cc:6e:2d:07:de:b8:db:5f:2a:a7:dd:c7:7d:
         51:aa:96:fe:f7:81:27:89:77:d1:b5:ab:b3:f5:50:a0:95:56:
         f5:fe:84:36:c1:d4:36:d0:05:97:47:ac:e5:64:21:17:2f:01:
         ff:c1:ac:f7:a5:f4:0f:f8:ea:b6:36:85:ca:dc:29:20:a3:63:
         40:88:43:a4:29:2c:ba:ad:99:95:af:10:11:ec:2f:a7:75:9e:
         82:19:31:6a:06:a9:8e:15:14:73:14:ae:3f:86:dd:7c:3a:f6:
         e2:f7:c1:ea:72:b3:69:a9:e1:8e:a3:8c:a8:5e:f7:63:ce:f2:
         ae:65:ae:46:c0:45:e2:b0:a4:48:04:a4:37:95:83:b5:59:0e:
         db:19:96:6a:7c:4e:59:d0:0e:5f:86:75:6c:0a:c9:a7:14:bb:
         f4:00:d2:c2:60:7c:62:c1:e2:31:b3:63:11:4f:8d:0c:bc:cd:
         a8:af:a4:7c:e8:65:77:4f:d7:1f:19:31:81:81:25:d8:fb:68:
         5d:8f:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----