Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File:                     ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier:          mRvIz5L4f4T1F7rhWpk/ja4D/bK5ssIGMFWC+JBSZT4=
Subject key identifier:   8E:91:E6:1F:1F:4F:BE:DB:B8:D7:9A:0D:68:E8:85:52:58:A5:92:8C
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer:       /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial:       01962E993AE39994426F7ED232ADB6E78930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number:          096E
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: uCzi/swVpb+Og/yUdml0HJJuBsjJJm+RyuLKcpRSQXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3a:e3:99:94:42:6f:7e:d2:32:ad:b6:e7:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=8e91e61f1f4fbedbb8d79a0d68e8855258a5928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:a8:f0:22:7c:73:73:10:28:f7:9d:fb:ba:
                    8e:6d:5d:1d:7d:d0:f9:23:d8:4c:93:49:9b:f2:e5:
                    cd:5b:a8:03:75:29:7c:87:d4:27:8b:5f:30:d3:5d:
                    fd:b8:0e:ea:36:cc:92:da:4c:08:68:7e:e2:84:58:
                    3e:df:32:e2:db:c1:31:73:e6:6e:3f:6d:6e:83:8a:
                    cd:e8:f7:08:86:55:3d:7c:dd:c3:d0:ff:bb:d3:b2:
                    43:07:51:e6:1c:6e:a0:8a:4b:ba:39:89:b3:dd:8d:
                    d7:15:12:44:c8:d3:f4:73:55:d8:c1:7b:eb:56:06:
                    05:75:c8:4d:c2:7d:49:fe:54:5c:41:d5:62:f3:a8:
                    2e:bc:a1:80:f7:0a:59:eb:40:28:91:5c:f6:5c:c4:
                    63:9f:a4:ce:09:96:d1:11:5c:c7:93:8c:b9:d5:51:
                    2d:ee:5d:34:1a:0e:0a:ce:67:00:54:25:a7:7e:24:
                    15:41:fe:58:31:d1:2c:c1:a6:0b:34:6a:15:6c:d0:
                    e4:f6:84:22:66:fc:b2:f4:3a:70:27:43:4e:23:c5:
                    1e:6d:d1:b7:f2:d9:5b:2b:d7:20:28:7d:47:ac:a1:
                    85:fd:16:06:51:0c:5a:74:db:d6:9f:c0:09:72:e3:
                    3c:a2:a8:34:54:0f:51:a9:6a:f2:a1:ae:35:f9:34:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:91:E6:1F:1F:4F:BE:DB:B8:D7:9A:0D:68:E8:85:52:58:A5:92:8C
            X509v3 Authority Key Identifier:
                keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:56:a9:c6:ed:58:0e:24:0f:7d:29:91:b4:e0:f4:c7:dd:
         19:3d:63:99:c0:46:54:65:d9:07:37:da:be:cc:cf:d0:32:fd:
         7c:00:8c:41:35:13:28:4f:11:3f:7b:52:52:f9:be:61:52:1a:
         cf:77:14:50:b6:9f:3a:67:ab:59:8f:32:b9:de:66:02:37:34:
         90:34:7d:61:3c:65:ff:55:b1:da:7b:87:e3:89:28:d5:8c:3c:
         14:b5:14:8c:90:06:67:ef:92:09:82:3c:a2:86:bd:41:bf:c3:
         56:d1:44:38:2b:7b:f3:8e:2e:99:d1:25:e1:81:18:8f:0b:0f:
         98:ac:0e:24:c5:2a:6e:79:8f:a5:57:dd:4c:29:eb:ba:27:7d:
         fd:59:83:46:9f:7e:d9:e0:2d:4d:06:e3:56:71:28:20:ae:68:
         c5:be:23:05:da:38:cb:f9:41:50:19:10:c7:0a:8e:b8:72:f9:
         54:2b:ea:d7:31:37:b6:f8:9f:a0:53:a6:5c:0a:45:8b:2c:f6:
         86:b6:62:34:81:92:54:70:b2:98:11:9c:79:a8:b8:11:e5:45:
         fd:e8:5a:f1:ff:a9:a8:8d:65:43:ef:3d:a3:ab:bc:83:b2:15:
         b9:b3:fa:d3:99:8c:49:0f:7f:3e:49:73:6c:54:11:ac:6b:49:
         c8:15:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----