Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File:                     9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier:          TdOpUuEo+GE5dBMwaqFTTjP9s20YXFp5YrpL3eNWU4c=
Subject key identifier:   A5:2B:73:DB:7A:8E:91:0B:36:9F:DC:81:7D:50:0D:48:4C:DC:2C:91
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer:       /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial:       01962FAB48EEFF6911FFD91BFC1BCC41434C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number:          0484
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: 3YH/aQcXBaE5BTLxQsFjL6z97Jrg3eXZFpjC2Qphwdg=)
                          2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
                          3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:48:ee:ff:69:11:ff:d9:1b:fc:1b:cc:41:43:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f566016d878230128b58e279d661c195e6399588
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=a52b73db7a8e910b369fdc817d500d484cdc2c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:31:be:3e:13:bc:81:42:7b:c6:f6:4e:c6:
                    34:b2:be:11:9c:5a:8e:7e:78:9e:57:47:3c:35:1a:
                    c1:d2:ac:e7:81:d3:25:3b:7e:ea:84:78:58:76:54:
                    9e:3d:cf:61:a9:4c:0b:8d:46:3e:eb:3b:95:86:b1:
                    ef:79:bb:5b:9a:0f:13:14:87:49:dd:6d:db:7b:d1:
                    01:0b:b3:44:a8:cc:cc:c9:78:81:cd:cf:6c:fe:a1:
                    0a:e8:a4:1b:2b:2b:d9:3e:21:db:5e:d9:30:26:e1:
                    fd:f8:c8:ca:98:76:86:75:50:9d:04:f8:d0:68:ad:
                    ad:09:42:6c:23:3d:ed:29:14:d6:06:fc:18:89:91:
                    a9:13:06:bd:f8:39:b3:6e:e7:a1:27:a5:d0:15:57:
                    d8:32:d6:9b:b4:ec:d5:53:0a:ae:59:ba:e3:85:35:
                    49:51:c1:ed:69:7c:53:ad:61:44:36:35:d0:02:0b:
                    5e:ef:78:ac:c5:5d:b6:8d:ac:48:24:92:91:e9:ef:
                    8c:e5:4d:7d:3c:5e:6f:8f:5c:04:b3:b7:eb:77:f6:
                    67:d7:0a:e2:2a:46:72:d7:37:5c:2d:f0:cd:b3:9a:
                    80:99:8b:16:1a:0a:cb:b1:4e:1f:d6:f2:f9:78:89:
                    54:52:7a:17:53:74:50:2d:2d:af:57:b6:89:13:92:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2B:73:DB:7A:8E:91:0B:36:9F:DC:81:7D:50:0D:48:4C:DC:2C:91
            X509v3 Authority Key Identifier:
                keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:9d:de:b9:ef:04:45:72:7f:82:c4:e5:62:2c:56:48:77:
         c9:c5:ec:ad:cb:c6:63:a8:e4:ad:a0:02:43:83:40:95:05:b6:
         c0:a5:28:ae:38:0a:15:88:6e:9a:3b:a4:73:40:9c:44:6d:04:
         2d:4e:e8:d0:a8:b3:e6:fa:4d:d0:da:4b:a3:6e:f0:58:e0:d9:
         6b:00:a5:84:e9:fd:76:78:07:54:b1:d2:f8:74:d9:f1:44:ee:
         3c:f0:49:a1:2c:66:f4:db:6f:bc:6d:b9:32:77:f9:a0:9e:15:
         15:10:62:ae:1a:7e:d5:36:81:67:78:12:b5:a1:f3:fb:04:2c:
         09:b9:58:94:5a:8d:9b:a6:e8:99:cd:1f:21:59:44:25:68:42:
         3b:c0:ec:27:c2:e7:55:cd:34:a3:0b:d0:7e:9a:96:a7:6d:aa:
         08:3c:86:10:2a:9e:89:88:68:58:4c:ae:d7:14:00:11:c8:f2:
         ef:b6:46:64:00:e6:25:c7:9c:e0:b4:71:f7:35:b2:aa:56:2c:
         48:70:4a:50:45:21:d2:83:52:b0:72:31:0f:42:33:ca:69:f1:
         cd:3b:3b:92:a7:21:a9:3a:f7:88:8e:c4:5b:9c:9b:69:e2:99:
         62:cc:cf:44:79:63:ed:95:49:6a:52:14:c6:71:59:f0:e5:35:
         3f:c8:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----