Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File:                     v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier:          GRKNtao3V5UrkE5Xr0NogMt7BN1vWvB3CRGEbDRJOCE=
Subject key identifier:   ED:7C:7E:E1:D5:CF:0C:6A:C7:58:5E:D0:F0:18:F6:27:39:95:6C:6C
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer:       /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial:       01962DF3F1865BEA64312BD4047E812F5C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number:          0DE0
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
                          2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: 2Wfh17wLcxE18OVEfOCuwb5wbJGalsFHUl7JXUHLo6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:86:5b:ea:64:31:2b:d4:04:7e:81:2f:5c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=ed7c7ee1d5cf0c6ac7585ed0f018f62739956c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:47:10:91:f5:7d:fa:22:2c:5e:f0:ab:44:
                    5e:de:3a:7b:02:aa:6a:a3:4b:e2:c5:51:0b:c7:8f:
                    f7:56:8b:8e:12:57:bb:6b:99:05:81:a8:62:8d:11:
                    65:13:01:ac:c4:88:a7:0c:67:61:ea:58:0c:a6:01:
                    41:c9:96:f7:e3:b6:ef:75:23:30:34:bb:16:0e:80:
                    d3:30:be:90:76:2f:44:43:8a:83:62:78:1a:b4:0c:
                    95:8b:0a:c7:6a:d3:d3:20:c9:58:06:6a:4e:1e:e7:
                    ab:ab:ce:4c:6a:86:70:f7:e2:e7:35:38:07:8e:b6:
                    a5:3d:4d:03:b0:dc:1c:18:5e:30:a1:9e:c4:8a:03:
                    de:86:11:25:30:b7:cc:ac:4b:34:a4:63:e6:4c:5e:
                    e7:89:48:db:5d:87:a6:4f:0d:85:c7:52:2b:b6:92:
                    10:25:8e:ce:c1:df:ac:e6:5f:c0:99:f2:83:f0:5c:
                    b6:81:63:82:13:59:7f:15:e4:1a:37:f4:39:6b:61:
                    8e:79:81:de:7e:ac:4a:ed:ac:5c:c6:1c:82:83:73:
                    78:4b:6a:6a:9d:30:2d:19:d0:54:8d:74:cc:9e:9f:
                    54:38:dc:b2:e8:f2:e3:fe:a0:13:ef:86:f7:bf:0c:
                    a8:e7:02:00:a7:56:77:c7:30:fb:8a:4a:1b:29:09:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7C:7E:E1:D5:CF:0C:6A:C7:58:5E:D0:F0:18:F6:27:39:95:6C:6C
            X509v3 Authority Key Identifier:
                keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:22:6b:aa:8e:42:31:31:cb:57:81:e4:83:18:fc:97:63:
         d1:5a:a7:fd:a8:d3:f5:53:41:a6:4e:0b:ec:0d:4e:b3:e9:27:
         d0:56:eb:d5:e9:26:22:e7:93:88:59:cf:49:03:c7:10:06:39:
         5f:cc:5f:43:ee:fb:1a:b9:29:9d:81:92:3d:21:6e:8b:1b:12:
         93:ca:11:67:58:a9:ec:54:2f:0d:89:b6:cf:87:76:19:f9:aa:
         b1:e3:4e:e9:db:76:9c:f6:48:c1:03:f1:80:8a:3f:1f:3c:2a:
         e5:52:21:d4:3a:d8:71:3f:9b:cd:f2:b9:c5:2e:13:19:14:9d:
         a7:18:52:62:29:bb:11:58:ec:42:f9:20:48:8f:ed:95:9f:88:
         cf:ea:6b:bb:87:06:03:39:63:c6:5c:fd:86:e4:ab:0e:ea:06:
         4c:6f:b7:63:67:b7:58:1e:f8:9e:91:22:71:86:84:f6:46:ca:
         2d:13:b2:29:07:1e:4a:20:2a:74:59:c5:10:34:05:a6:fb:67:
         7a:d7:9d:73:da:11:64:1b:96:fb:70:1b:e7:a8:07:91:69:25:
         89:57:6f:84:56:39:d1:8d:3b:c3:55:f7:b1:e1:87:40:2e:d2:
         64:5c:f7:59:62:c1:92:fa:fb:33:67:bc:a1:0b:85:4a:9e:03:
         fc:1c:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----