Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File:                     8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier:          5e//MC6nkJsEKMI6ovr+MEr2XeZTa0oXw9pFAGkdVqw=
Subject key identifier:   98:DD:74:60:BA:A6:77:F8:F7:FF:8D:A8:82:A8:04:84:17:67:2B:B0
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer:       /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial:       01962F07096EF5155B69D99AAB0462ECF3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number:          01C9
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: tcNLU9JWwWn1RPdwTTy8FOMRvAX57lUtvEv3abgzuWo=)
                          2: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
                          3: JKMKM7uXmV7lI_F_YSWzDWamfs0.roa (hash: xcsy0pAckaCr9b80/NnrYrq4k894iPZjymdOh59OUBk=)
                          4: M4-beGRB9tOP3S3vejQEdcFQFUs.roa (hash: T0CA649c+RNTd9rAKy27jb+pgwbmOkXNyfnl9vaMPls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:09:6e:f5:15:5b:69:d9:9a:ab:04:62:ec:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=98dd7460baa677f8f7ff8da882a8048417672bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:46:51:6a:dc:33:06:66:eb:5e:ca:ed:85:
                    b5:da:93:8b:f4:9e:10:1f:9b:04:51:2d:5d:51:23:
                    48:e3:ce:a4:d9:b3:c6:f7:e2:17:38:9a:af:0a:e3:
                    56:61:31:d1:d5:4c:e1:11:8a:5c:a7:16:31:f7:c1:
                    15:5f:ab:62:3b:0c:05:71:c4:d1:e8:15:e2:81:f8:
                    e9:c3:7d:ca:61:da:43:84:ee:97:81:e9:bd:2d:97:
                    32:2e:bb:8c:70:35:f6:e6:09:97:a9:c9:07:ac:e4:
                    31:81:4f:ef:ee:63:39:c1:0a:05:14:b2:e0:f0:c1:
                    a3:5b:8b:36:bd:10:6b:1d:c6:d2:25:e7:ca:b4:33:
                    82:cb:46:aa:81:a2:1d:fc:1f:91:20:62:18:b8:5a:
                    ef:8c:ef:4d:68:ff:b2:d6:4c:dd:db:fe:78:08:bd:
                    02:2d:bc:20:d6:55:25:b0:3b:12:75:3b:13:52:0f:
                    69:bd:4a:51:d7:f1:59:48:8f:82:30:63:4d:03:0a:
                    3a:76:d1:07:90:23:94:1f:6d:8c:20:ad:be:aa:c5:
                    90:63:af:c0:52:6c:7b:c2:12:19:07:15:e3:c3:c4:
                    f8:7d:91:a6:18:c5:b6:a8:f3:e3:82:0c:98:6a:85:
                    dc:ea:a4:37:58:be:a8:7b:06:fc:19:cf:31:c4:7b:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:74:60:BA:A6:77:F8:F7:FF:8D:A8:82:A8:04:84:17:67:2B:B0
            X509v3 Authority Key Identifier:
                keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:7a:aa:dc:c9:60:86:1b:8f:01:fd:9a:d3:4c:d1:4e:e1:
         1e:12:8c:f2:64:99:d2:4e:dc:a2:bb:db:2c:0f:7c:6d:b1:3e:
         c9:1f:1f:bf:f4:86:35:75:ec:bd:b7:f7:74:dc:90:be:4c:b2:
         08:d4:d4:c5:f2:8a:98:f3:07:14:c7:73:c9:2b:89:fd:3f:85:
         14:cd:f3:a0:87:e3:e8:21:56:9e:e4:6b:45:df:fd:f3:0c:03:
         79:23:a4:b9:2f:26:b5:01:f9:d6:81:0b:20:33:0c:90:7d:68:
         26:2a:42:6e:ed:da:44:91:87:54:ff:11:5a:16:89:b4:48:6b:
         77:14:d1:eb:84:6b:4f:9c:08:b5:b8:f0:95:0a:7a:b8:fd:47:
         9f:35:fd:1c:e5:21:bf:b7:06:58:f7:cd:8e:f0:59:b2:80:1f:
         a4:e1:ef:95:fd:c5:ba:38:9b:15:56:31:e0:24:e5:70:11:7f:
         8f:e4:9c:8b:f0:90:2c:71:11:fc:67:31:04:89:ce:8c:91:dd:
         65:08:ae:ac:46:28:00:55:a5:d5:05:b8:f2:08:2e:be:07:3e:
         73:11:11:be:eb:51:9d:c0:5e:52:e6:83:1e:d6:fa:13:07:ea:
         5f:de:ba:25:80:22:53:f0:9a:1c:7c:80:6f:21:3f:f3:2a:3c:
         89:0f:3f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----