Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          Vx5eJw5+70wcDwEnOfZbZhAWvDZZeLW7LQdyuKlPG+w=
Subject key identifier:   D6:B4:A3:AF:56:86:05:82:A2:93:5F:88:58:0E:D6:EC:3E:35:34:67
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       01962F74D76988A935FBEF935085A42694DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          0FA0
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: 1kT3vgGctzYOi+DxwM738XvDmBSDe5DFby0yaDq21ck=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d7:69:88:a9:35:fb:ef:93:50:85:a4:26:94:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=d6b4a3af56860582a2935f88580ed6ec3e353467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:3d:93:7d:03:89:14:ea:7e:38:a7:6a:17:
                    04:17:b9:ff:0e:3f:81:a8:3a:12:30:b6:e1:20:bc:
                    a3:99:dc:f9:86:9b:7a:48:59:c7:f9:cb:8d:fc:05:
                    7d:0f:3b:30:e5:9a:00:e6:e3:8f:72:12:3f:ed:fc:
                    9f:8b:af:30:46:6e:9c:32:de:3c:20:ae:57:18:b3:
                    b0:2b:bd:1d:c7:1f:0b:6c:8b:95:1c:8c:d7:ef:a4:
                    3e:3b:43:a6:d4:5b:a7:b3:35:2a:c1:32:9e:42:82:
                    fd:3a:2e:30:ba:54:0b:14:eb:f3:a0:0c:ff:c7:f9:
                    69:3e:6c:33:b4:7e:d8:6b:b0:40:9a:97:8e:c7:19:
                    3a:7f:40:f8:d8:19:2c:75:c1:54:79:e9:93:ac:1e:
                    88:4d:68:65:30:d6:e7:ae:de:7a:06:bd:1b:41:3e:
                    9d:9d:e4:c9:26:1f:d7:f1:94:6d:47:0f:d0:5e:c9:
                    9d:02:53:98:98:59:8a:6f:6b:0c:fa:6d:73:ed:2e:
                    b5:59:22:fa:aa:0c:3b:29:be:55:f0:7c:12:31:b5:
                    19:64:a8:af:47:4c:55:ea:da:de:36:d4:fc:9b:c3:
                    5d:2a:c2:2e:a0:c5:f6:58:48:8c:bd:2c:da:e8:d3:
                    b4:28:69:c3:85:41:bb:58:ec:c7:f9:cf:06:42:d8:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B4:A3:AF:56:86:05:82:A2:93:5F:88:58:0E:D6:EC:3E:35:34:67
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:e1:e1:a9:63:54:13:06:1c:73:90:f7:d0:83:9b:8e:cc:
         b4:36:21:15:ea:77:bd:ad:9e:8d:bd:c3:51:4a:d3:da:1f:df:
         d5:0d:5d:d9:77:dc:40:c5:3d:4c:79:94:50:be:26:95:55:10:
         d2:6a:da:59:13:28:88:54:6b:44:51:c7:28:cb:ef:fc:51:01:
         9b:72:9d:93:f5:77:e6:1e:38:9b:e3:7f:aa:56:2e:e2:1d:e7:
         b3:45:bf:07:23:12:91:ef:39:51:53:c2:c0:8f:7b:df:c7:f6:
         ca:23:93:b9:01:35:2f:5f:1f:53:6f:8d:2d:82:2a:23:4e:74:
         14:8b:1b:a5:23:b1:ea:4a:78:4a:27:a3:3b:3d:e1:01:04:02:
         02:0e:e7:78:99:9d:0d:5b:39:66:01:8c:cb:80:10:f6:23:f2:
         24:5b:bd:5d:47:95:d8:6a:63:5d:d2:82:9b:40:f2:a3:02:b5:
         7a:47:be:6a:28:cb:50:99:b2:b1:9e:e7:d2:56:5b:2a:2e:8d:
         f9:b9:dc:29:04:8b:c9:a5:ab:39:30:cc:25:67:c1:b0:2b:d2:
         e3:62:ee:62:53:78:b1:50:2d:07:3f:2f:42:1a:a1:3b:a0:ab:
         06:5f:e6:85:95:2e:1a:23:24:c6:d6:ec:6e:1e:49:51:ed:37:
         92:6a:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----