Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File:                     S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier:          kk8d06tHei7xm6awLM2MuqLP9Ae0Zb06VTI6ljtmCyE=
Subject key identifier:   E8:97:8D:F8:11:1C:35:FA:7D:B1:C5:63:A3:26:27:5C:63:C6:16:91
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer:       /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial:       01962E61C6D7A20DBA656354172FFA0E2CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number:          0A97
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: s8v5rYXt9cnARg1BFlKmVaH9KWxd2Sak8s5Ah1gHrOQ=)
                          2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:d7:a2:0d:ba:65:63:54:17:2f:fa:0e:2c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=e8978df8111c35fa7db1c563a326275c63c61691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:21:4e:22:cb:ee:07:40:18:4b:62:12:2d:
                    92:f6:b2:89:b8:18:0f:47:dd:e5:db:ea:d6:93:be:
                    da:a5:c1:9d:05:20:66:cf:3e:85:da:d9:72:e0:3e:
                    e7:e2:e9:3c:70:e8:a6:cf:a6:7c:eb:4a:a1:50:5a:
                    cd:85:9a:8e:27:45:0c:d5:c1:02:07:7c:26:ae:20:
                    5c:56:e5:8c:57:91:6d:e9:12:9d:61:ae:30:dd:8a:
                    15:66:0c:9e:bc:b7:e5:4e:f2:1d:f0:5d:6f:52:7c:
                    71:28:24:37:97:99:d4:32:76:00:a1:c5:87:17:9c:
                    3a:78:86:cb:e6:96:1c:25:a1:38:c7:34:53:3e:17:
                    97:1c:ab:24:16:21:30:f4:12:22:02:49:31:4c:0d:
                    fc:ca:c5:c1:8a:26:83:54:c2:50:83:75:0b:fa:cb:
                    c2:fa:ed:5b:4c:ae:7d:d7:28:0a:3b:0f:ff:99:6e:
                    c2:6b:a7:a3:ce:bb:74:81:88:7d:02:55:47:56:74:
                    9f:84:0f:47:ec:de:a3:94:71:4c:6c:b3:05:d9:a4:
                    a3:b9:09:c5:4f:90:cb:c5:46:90:b1:f0:1e:b9:9c:
                    eb:12:0e:b4:b3:ee:99:7f:bf:f5:7f:db:18:6f:24:
                    a1:88:da:bc:22:16:c6:d7:7e:45:69:e4:47:ce:55:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:8D:F8:11:1C:35:FA:7D:B1:C5:63:A3:26:27:5C:63:C6:16:91
            X509v3 Authority Key Identifier:
                keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:66:a6:2f:a4:10:21:8b:91:f7:a7:69:4e:fb:6e:58:13:e3:
         7f:65:5a:76:aa:8e:40:69:5c:4f:2d:29:b3:b9:ac:0b:d5:9d:
         d7:fb:1a:1c:72:45:5c:fb:fc:f6:38:22:15:fc:a5:6c:6e:ff:
         93:36:8e:46:f2:5f:94:98:ed:84:97:34:16:b7:50:65:27:1f:
         15:e9:62:d1:5b:b7:b4:72:c9:87:65:4b:40:c7:95:d0:6a:bf:
         15:1c:18:de:41:83:9d:16:b5:0c:99:7d:4a:8c:87:d3:5a:69:
         1b:2e:9c:24:3a:d4:df:b1:6c:86:f4:06:5a:a7:e1:45:1f:be:
         8d:19:13:a0:f6:4b:4f:29:9f:33:d4:f3:7f:e4:d8:9e:32:46:
         2c:24:0c:37:3c:ec:fa:f5:be:3f:30:30:4b:d2:50:29:31:d1:
         73:10:7f:74:b1:58:4e:fd:88:b4:0a:3a:a0:c7:1b:ce:93:01:
         f0:3f:bf:97:f3:55:40:45:a7:ba:3b:98:73:f7:9a:b7:5b:96:
         fd:d4:85:4e:9f:42:93:25:3b:b6:3a:25:28:af:d7:6e:ec:9c:
         d4:27:80:28:c5:72:29:ef:0e:06:b3:bb:74:47:af:f7:5e:5b:
         6b:27:68:16:9e:5c:d2:c3:08:8c:4c:2b:36:87:8b:69:75:5f:
         35:0a:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----