Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File:                     1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier:          7jMPftptPkK2z3fjnftr6fQzg8xVBy4H01IpAz3Un58=
Subject key identifier:   3E:C7:0C:B1:47:8C:90:29:0B:6C:78:3B:42:65:B3:8A:5F:85:56:9A
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer:       /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial:       01962E98EBF0312D3BD03B84E965B33CFE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number:          09B8
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: AW3NTuw5AL4dYj4FQQjLeaFIEYElp5NDSDYhiO/Ox/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:f0:31:2d:3b:d0:3b:84:e9:65:b3:3c:fe:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=3ec70cb1478c90290b6c783b4265b38a5f85569a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:b1:72:4e:28:93:47:c5:d2:b3:b6:40:3c:
                    63:00:55:5e:f4:0f:82:43:a4:0c:72:7b:d3:90:5c:
                    36:b4:db:bb:3b:a6:24:2a:12:60:d3:b5:51:29:20:
                    da:a2:e3:60:66:ad:e9:24:64:de:7b:3d:32:b1:e0:
                    69:a2:54:1c:a2:d1:d7:90:9a:9c:b0:55:e2:ef:18:
                    28:08:61:0f:ef:63:3a:1a:68:e6:8e:d2:4d:22:77:
                    35:00:33:28:67:73:b1:42:bb:e4:ab:99:68:cc:25:
                    52:15:a7:a8:c0:99:16:f3:59:2b:37:f0:25:2f:c4:
                    7b:11:ff:f2:ce:d5:0e:dc:a0:59:92:90:dd:db:2d:
                    77:e8:60:d2:23:26:58:5c:e6:9a:cf:18:69:ab:e3:
                    02:b3:ab:69:95:43:95:8f:ff:56:ec:ea:54:cc:f5:
                    f0:c4:63:b6:71:30:ab:16:c6:4b:ca:f4:ca:50:db:
                    d0:6c:7e:56:13:00:c8:2e:09:6c:22:5f:f8:43:79:
                    b5:53:14:14:61:99:48:19:b0:b4:2a:f3:78:ef:1e:
                    7c:03:17:79:05:00:2a:73:69:91:92:db:66:ec:44:
                    95:41:65:be:c4:2d:bf:0e:9f:ec:a8:70:98:a1:cb:
                    32:49:83:39:07:0c:69:8c:3d:e4:0a:59:ac:e6:a5:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:0C:B1:47:8C:90:29:0B:6C:78:3B:42:65:B3:8A:5F:85:56:9A
            X509v3 Authority Key Identifier:
                keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:94:88:f3:f6:b1:5d:fe:54:6d:bf:b0:0a:4f:5b:1b:08:
         ce:5e:64:61:19:84:7d:81:76:04:43:a4:ac:6e:bd:5b:27:f0:
         33:95:13:81:d1:1b:c4:70:9e:c5:0e:a1:ab:6b:8f:f0:ca:13:
         ad:72:48:31:c8:cc:31:ed:e0:c3:a6:a8:f4:ff:d3:91:ca:7e:
         80:79:7d:46:c6:66:1b:a4:d6:23:2e:78:42:db:12:0e:4a:c1:
         e1:71:1a:24:8a:5c:ec:9f:c2:9e:60:3c:3a:32:ef:79:4f:ff:
         48:3a:0f:11:b7:59:b3:c2:22:cf:c9:c2:1d:b5:ca:9f:24:65:
         33:cf:bc:4a:38:00:11:66:6f:5c:95:f8:1e:a9:d8:17:39:68:
         0c:fe:54:36:d1:dc:1b:d6:7d:44:d1:a7:84:7b:62:b0:c5:9e:
         5e:73:d4:2a:6d:f5:83:2e:17:46:b3:34:de:09:fe:ff:42:26:
         3f:2e:7b:2f:71:28:47:07:16:53:30:f5:95:7b:7f:3d:24:3c:
         e1:39:f3:9a:97:4f:e2:fc:30:d8:f6:e6:72:91:14:b6:e5:21:
         fa:56:5e:e2:56:52:78:8c:16:56:84:61:58:33:43:32:36:56:
         b4:c3:d3:79:ff:c1:b1:00:c0:3c:74:36:2e:74:17:28:4e:c0:
         17:e9:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----