Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          ze+VARwHYP0veqQ+nHTCSf+Rw3GLyX/Y0l5L309X0KU=
Subject key identifier:   04:89:25:59:B3:9C:C1:B4:23:0B:1D:A3:23:EB:6C:E7:FA:E3:15:63
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       01962F74CB51BF89CEB632FFD784D47CB755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          09CD
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: mHLkvfb9GK+HY3SFqDRR1R1PehjV6PrfmEg3pjaCv+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:51:bf:89:ce:b6:32:ff:d7:84:d4:7c:b7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=04892559b39cc1b4230b1da323eb6ce7fae31563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:2c:3f:50:cb:98:fa:76:d8:97:2c:05:10:
                    16:2b:6f:dd:b7:11:8b:07:9e:31:a6:ce:95:ef:3b:
                    c2:be:f8:ca:20:54:90:58:c9:2e:56:c0:d7:2f:d4:
                    6d:f7:c2:5e:19:7e:98:5b:d1:77:9f:2d:33:84:3f:
                    15:14:65:ce:65:20:de:fa:b8:c3:7e:bc:4f:9e:28:
                    da:43:36:c6:48:7a:1a:c0:cb:45:c9:3c:3c:d7:77:
                    fc:32:97:d9:62:f7:07:64:b0:19:db:e7:e0:13:12:
                    49:af:d5:9d:fd:c7:09:7c:85:c7:31:cb:b6:50:6d:
                    5b:77:50:6c:6c:90:a6:fe:e6:2b:ca:20:7d:f4:18:
                    91:73:16:7e:57:45:c3:9c:59:84:ad:94:9b:d5:91:
                    07:d6:f2:b6:76:5b:de:46:b8:80:24:98:58:de:fb:
                    bc:63:71:ab:27:4f:0c:11:f4:b2:09:99:48:f3:f2:
                    8b:6c:1f:54:f7:36:5b:a7:d9:aa:6b:b7:3a:e1:ac:
                    ca:92:9d:c2:ae:d3:dc:43:76:f4:ec:3f:fa:96:bd:
                    06:dc:ed:a2:a8:73:4c:1b:0c:5f:9b:21:92:46:c5:
                    16:cc:6b:5a:fa:1e:35:c6:b6:61:8e:f2:0a:3d:29:
                    81:3d:c1:f4:f2:11:c9:09:a1:3b:c1:3a:06:4a:7e:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:89:25:59:B3:9C:C1:B4:23:0B:1D:A3:23:EB:6C:E7:FA:E3:15:63
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:c9:04:b9:49:9a:7a:d1:99:8d:95:37:84:9e:fd:f8:d5:
         26:9e:9f:b1:3e:ac:08:70:58:f4:8b:4f:d7:9f:d5:f9:2c:8a:
         80:f7:73:08:dd:54:57:ec:b3:58:cb:7c:e2:3b:85:8c:35:42:
         77:9c:39:86:de:98:39:01:62:72:8e:b0:14:b1:71:b9:ca:2e:
         98:0d:04:83:f3:05:3f:46:94:0d:aa:8f:7d:75:d3:92:d3:06:
         5e:5b:77:95:3f:7f:65:fa:af:38:40:40:09:ff:50:86:98:b4:
         42:0a:fc:9a:1c:22:ea:3a:5b:d9:f4:4c:81:84:a9:f1:f0:8f:
         22:47:4c:9e:26:a1:b3:20:3d:e1:d3:a6:b8:bd:49:a0:20:33:
         48:b3:9e:88:aa:e8:45:b6:e7:b1:1f:11:22:10:a3:05:48:bd:
         db:93:88:1e:fc:6b:ea:30:37:90:66:72:06:ef:8b:6e:0a:aa:
         f3:19:4b:5c:47:c2:3a:50:9c:a3:f1:63:b5:a7:68:da:df:d2:
         c0:3a:bd:ad:c9:5d:45:a2:76:c4:f6:ef:60:7d:af:d6:bc:fd:
         ad:b0:9f:2a:a8:ec:80:05:cc:64:0a:33:30:3f:ac:39:f5:f7:
         16:6e:d1:d9:2f:d5:04:e0:ec:26:2d:a5:b4:8f:e3:db:36:ed:
         1f:bf:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----