Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File:                     97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier:          S1NGQP0EvNQ4WjQAHFM+d7+xon1mBWfqztq9mhjMCUU=
Subject key identifier:   53:2B:C5:7F:C1:4A:6F:75:B4:6A:D1:FA:61:F3:15:F4:02:89:C4:E3
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer:       /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial:       01962E618FBDD0C6F098C336A1C550262D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number:          0C91
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: Q3fHw5MZ7+AvZV5Um5GKiYn6ruchvMda9Hw5YL8Nk5o=)
                          2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
                          3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8f:bd:d0:c6:f0:98:c3:36:a1:c5:50:26:2d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=532bc57fc14a6f75b46ad1fa61f315f40289c4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:c7:13:1b:89:e9:36:59:6d:f7:67:ef:c4:
                    1c:59:10:4c:ed:ef:31:5e:b2:e7:5e:54:cc:78:3b:
                    4c:ed:ed:f2:93:13:fc:24:7b:e4:ac:42:33:10:37:
                    43:24:c4:d8:75:52:f1:02:44:19:97:4e:9a:3e:c8:
                    19:2a:45:ac:21:a4:a6:9c:87:59:66:f4:f9:03:e6:
                    12:36:84:32:7c:ad:55:0e:85:f6:ec:21:fe:50:89:
                    74:f9:60:79:94:eb:26:d7:84:df:24:68:bb:c9:ed:
                    51:71:ec:e7:45:6b:da:70:48:44:12:11:20:26:c9:
                    5a:f8:b1:73:86:58:44:b7:05:ab:1b:43:7c:67:fd:
                    de:2d:7d:54:83:5f:e6:eb:d0:8a:25:32:45:a2:c0:
                    03:26:05:39:23:99:36:16:3f:9d:6f:ad:42:e7:97:
                    10:7e:4e:7b:9c:2b:05:96:73:ce:ad:a8:75:a0:a5:
                    69:62:b5:1d:da:51:c5:01:66:f2:1b:8e:4e:48:35:
                    5f:15:e2:0b:cd:10:eb:94:19:db:30:a7:e2:6e:fa:
                    7a:88:bc:5e:79:2f:c5:af:df:b4:2e:72:13:57:8f:
                    47:0a:1b:22:e4:ca:90:f7:04:4c:a6:98:0f:b2:53:
                    50:19:4f:56:36:07:46:6f:97:58:c6:8a:50:fa:11:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2B:C5:7F:C1:4A:6F:75:B4:6A:D1:FA:61:F3:15:F4:02:89:C4:E3
            X509v3 Authority Key Identifier:
                keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bf:9a:d6:07:41:57:f0:0b:9a:59:d1:25:34:b2:7b:8a:73:
         11:4b:0f:59:74:c1:d2:9f:7d:8a:0b:3e:26:33:24:ad:b1:e0:
         fd:23:6e:73:ff:18:3f:38:6e:9a:a8:80:f4:85:88:0b:f7:01:
         aa:ff:92:42:7b:3b:02:73:f7:5e:d0:8e:9f:47:41:8c:be:47:
         9a:a2:54:19:a0:64:6b:ae:65:ef:fd:f2:5e:8c:f0:31:e0:6c:
         95:5c:28:c7:35:3b:47:39:64:90:72:06:8e:56:be:c9:1c:76:
         b9:18:d6:89:9e:fb:41:6b:8f:cc:6b:cd:b7:99:8a:88:41:e4:
         3f:55:67:8c:3e:fd:e2:80:95:6c:14:92:b7:3b:9b:25:e1:ce:
         58:a3:46:5a:c8:e7:e8:5d:2b:96:2d:ea:1f:bd:5a:72:27:d2:
         21:0d:fb:7b:92:3a:a5:6f:1b:80:7c:9f:48:57:cb:df:15:31:
         d0:f5:fc:9d:ee:dd:79:fc:2a:d6:a1:75:b9:aa:14:58:72:64:
         3c:26:8d:b5:6d:ba:8e:5c:07:a7:d1:86:19:0c:fb:d5:a8:d0:
         b4:6b:9e:bd:6d:ac:b6:ba:46:88:55:f1:d3:67:2c:c9:f1:e8:
         cf:f4:c2:0a:e7:12:e6:5f:7b:b3:25:6a:bf:bd:99:dc:ed:89:
         61:8f:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----