Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File:                     SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier:          k470pVCN+bemt6e+XxrvGWPL0TpqyavPdKB6Vnkzes0=
Subject key identifier:   0C:F2:CE:CE:09:0B:F7:35:2C:CA:F3:5F:74:08:D7:27:AF:D4:AB:95
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer:       /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial:       01962F069B1FDE6DC995D3E3031CDC49057C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: rVT7Tb1ZCt3V+yYfLjDoutofmevOCS0qkINkbs7V3Zw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9b:1f:de:6d:c9:95:d3:e3:03:1c:dc:49:05:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=0cf2cece090bf7352ccaf35f7408d727afd4ab95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:64:4f:15:87:05:18:f5:c7:bb:02:1b:3e:
                    e1:40:e1:4f:b5:90:28:20:84:c0:f2:83:a0:b3:43:
                    f0:c9:5f:48:71:76:ea:81:77:83:fe:a9:53:04:6a:
                    5d:ed:9a:a8:b7:20:b7:0f:ef:a6:a1:27:c9:17:0c:
                    29:cb:52:c4:df:c5:e4:ae:af:2c:d2:23:b4:b3:2f:
                    ba:5d:81:bc:4f:a0:60:ce:80:b4:c4:3c:4b:6f:2f:
                    6b:2a:63:cc:96:92:37:03:01:a9:1d:cd:c6:3f:cd:
                    72:e5:59:16:5f:38:d3:d0:46:6f:62:8d:83:6f:b3:
                    21:a6:45:4d:e8:4c:36:41:ba:22:1a:ff:55:ae:4c:
                    37:e7:20:06:50:c4:63:fe:7c:45:ff:9b:6f:c5:9a:
                    44:49:83:f3:a7:90:6f:2f:60:2d:36:a6:fd:bf:83:
                    68:7d:e5:80:87:ca:5b:c7:71:20:34:b6:3b:5a:f5:
                    d8:d2:a0:3b:75:06:8c:42:6d:72:a8:88:05:56:eb:
                    20:21:01:8c:c9:bd:23:90:75:aa:c1:e5:77:e6:16:
                    25:7d:2e:64:c4:83:66:11:df:de:ff:66:ca:88:ae:
                    91:c7:2c:12:0d:5e:4b:3a:a3:10:04:4e:7a:0c:87:
                    6d:05:05:40:aa:99:a1:f5:f7:f2:b7:39:44:99:fd:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:CE:CE:09:0B:F7:35:2C:CA:F3:5F:74:08:D7:27:AF:D4:AB:95
            X509v3 Authority Key Identifier:
                keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:86:7e:6f:8c:56:35:05:d7:34:6c:30:a4:b0:ab:0b:2a:02:
         9a:1a:b5:4c:96:f3:7c:06:7d:52:a9:74:5f:c9:13:3a:0a:23:
         64:2f:96:ac:45:04:b2:31:81:3b:ef:ea:62:b4:7f:c1:45:d0:
         ec:e0:27:9e:d2:8a:eb:e4:d8:df:27:0b:a1:46:2c:1b:6b:a0:
         56:d2:ba:b3:96:32:14:36:8a:83:f5:3e:d9:17:2c:6e:2b:60:
         98:a0:d4:e5:6e:19:72:3c:9f:81:22:00:1f:c1:f4:8c:1d:41:
         df:76:d5:28:f7:b6:67:ec:5f:91:a3:58:4d:e4:dc:44:20:ad:
         f4:4c:d4:5c:0e:4d:48:cc:aa:22:0a:71:93:ca:7c:1b:64:59:
         be:15:1b:b4:e3:71:48:7e:ef:97:d1:c8:2a:76:1b:7e:29:a6:
         ea:46:98:40:50:58:73:4d:d5:11:22:ff:52:50:12:a5:23:18:
         3f:23:4a:d1:3d:ac:e9:92:14:29:22:a6:75:75:80:ac:bf:93:
         2a:7f:ad:91:62:e1:05:c9:1a:f2:2f:59:f0:8e:ca:27:29:28:
         ec:20:1f:f5:fd:22:16:82:e5:ff:3a:c7:e8:35:9d:03:f4:0a:
         72:b7:a7:b1:29:30:6d:ac:6a:a1:33:03:4b:3d:79:18:b4:e0:
         77:f4:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----