Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File:                     e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier:          vp4eF8FYVV5LL+z6VnFOn9meaefhycKzYdSwImu4x60=
Subject key identifier:   FC:84:60:72:C2:F0:28:7F:9B:0C:7A:8B:E7:43:4A:F2:96:A9:53:B2
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer:       /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial:       01962E98D7A651C18D805E135AC39DE7A486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number:          1424
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: T+wPm3YfG0i+jFDMkN0rQziedtVn2KYtY7o18kxFR+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d7:a6:51:c1:8d:80:5e:13:5a:c3:9d:e7:a4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=fc846072c2f0287f9b0c7a8be7434af296a953b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:20:9d:44:0a:bd:0f:b6:f6:56:02:58:49:
                    e8:af:6a:87:38:bf:fa:f0:01:e2:2f:7e:ae:e4:62:
                    27:05:8f:35:74:eb:32:bc:8a:48:30:64:6c:f6:af:
                    45:e0:a6:2b:b2:80:4a:0e:6e:5f:f1:86:0f:62:88:
                    45:19:41:7d:2c:ae:da:0f:a9:68:64:23:08:f3:23:
                    f9:0b:3a:0d:4f:5c:57:f0:e1:f4:35:38:e8:9a:6a:
                    7c:e3:63:93:af:70:38:b1:aa:2c:3b:dd:29:bd:c8:
                    c7:ea:98:ea:a7:6d:7d:31:b9:e8:54:b3:6c:5f:40:
                    c3:fd:f7:41:11:88:db:83:66:52:e2:9d:f9:b5:e6:
                    3c:0f:d0:0a:71:66:b1:e1:65:31:48:62:68:fe:31:
                    f1:7e:0f:8c:60:b5:39:ad:d6:e7:c4:8d:ac:27:c7:
                    50:a0:ce:cd:b7:f7:fd:b2:a4:7f:9e:79:67:0b:2e:
                    3a:18:60:b8:8a:75:04:f2:a8:b8:df:a1:9b:30:90:
                    a9:4b:62:aa:c8:a8:7c:9e:a5:11:bf:d9:3c:ad:37:
                    31:27:41:22:a5:82:53:f9:69:14:ce:ef:10:8d:23:
                    02:43:df:ad:65:e3:d2:6a:eb:0a:21:12:2c:65:41:
                    f7:80:52:df:90:90:7e:ca:d2:e7:e3:0b:d2:d2:84:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:60:72:C2:F0:28:7F:9B:0C:7A:8B:E7:43:4A:F2:96:A9:53:B2
            X509v3 Authority Key Identifier:
                keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:f9:89:e5:6f:59:67:f7:f0:63:c9:db:92:f2:3b:99:a1:
         30:c9:6c:5c:5e:ab:54:83:d7:cb:43:b1:1f:e1:bd:9b:9e:dc:
         68:46:19:d1:15:a3:df:21:42:94:e6:12:c5:01:6c:fa:06:36:
         16:94:29:0b:64:b0:3d:53:1b:a7:5e:b7:87:98:32:6b:5d:db:
         bd:30:b3:44:f2:d0:37:36:cb:26:6e:93:8e:1b:99:7b:b4:f2:
         8e:91:28:e1:a6:99:3e:12:76:f5:a6:3d:21:94:fa:5d:b7:80:
         9b:af:2d:af:33:6b:64:21:a5:1c:22:3d:a5:88:31:49:29:18:
         f3:88:0e:14:6f:3d:c3:26:6c:f4:45:01:77:87:9f:12:6c:b9:
         51:0b:eb:40:32:f1:53:3a:27:63:50:18:70:89:d5:e3:6c:de:
         80:ab:50:2b:58:fe:2b:8c:83:42:23:e9:8d:d1:f1:9f:03:1f:
         23:15:89:94:35:bb:c1:48:bf:07:79:1e:34:53:5d:6b:d9:b7:
         f3:ec:36:bf:50:34:2c:46:27:49:06:7e:4b:66:77:0f:2e:51:
         37:cd:27:39:42:ca:a6:1c:c6:19:b0:10:2e:70:be:d8:7d:2f:
         37:78:eb:5c:9d:20:76:52:ac:31:95:6b:ba:6d:12:ff:ad:ae:
         8a:a0:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----