Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File:                     m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier:          UhWFgXi3ma9JHb4sI769Ak7eOk21W/3J8ryIV1OdGyg=
Subject key identifier:   C9:E0:49:E8:69:F7:99:B5:78:21:35:E0:9C:60:EA:FA:A2:A6:03:EF
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer:       /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial:       01962ECFB6DF81E85E6E973D098BE8E6972A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
                          2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: o1U6Lpg4cAxQ8azHym/q2B2ZeQZDv4gcaWoGLNIRnc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:df:81:e8:5e:6e:97:3d:09:8b:e8:e6:97:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5193d843af193e24875686673c95896eae3497
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=c9e049e869f799b5782135e09c60eafaa2a603ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:50:6f:73:13:01:7f:99:7f:60:23:bf:f4:
                    24:0d:ff:e7:4b:04:94:99:9f:08:f8:77:c1:7f:ba:
                    f7:57:29:55:47:50:3d:9a:2b:22:43:97:2a:f1:b2:
                    04:4f:07:11:7c:c3:25:c8:75:16:6a:fb:b5:ef:54:
                    6f:db:35:5a:c3:67:aa:41:a7:74:ed:1e:23:8e:8a:
                    84:9d:dd:8d:de:46:fe:30:09:7b:c7:a4:24:e9:20:
                    5e:88:75:59:9b:3a:16:db:88:cf:c5:22:b4:45:32:
                    05:84:68:0b:b7:13:5e:82:15:96:0b:52:3b:8b:c6:
                    49:91:89:8a:dd:63:9e:75:6e:47:26:ec:3c:5c:a5:
                    3e:b3:b4:94:70:0b:c3:5c:9e:67:11:d6:24:43:6c:
                    e7:57:51:c3:74:f2:a8:46:fe:74:dd:d2:19:52:d4:
                    db:cc:16:df:31:f6:d6:6c:86:f5:1e:fb:45:9f:e0:
                    dd:65:0d:0f:7a:47:9c:8e:33:3e:31:72:95:b5:49:
                    a7:98:e9:94:40:af:ad:5c:e8:0b:c7:74:62:91:47:
                    71:2c:b3:49:73:7e:7a:aa:8a:1e:46:5d:75:07:37:
                    73:44:0a:ea:d6:c1:58:b7:ea:aa:2e:c6:b3:55:f3:
                    04:8d:91:5b:dd:84:03:bc:ab:d2:85:39:a9:c8:e2:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:49:E8:69:F7:99:B5:78:21:35:E0:9C:60:EA:FA:A2:A6:03:EF
            X509v3 Authority Key Identifier:
                keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:07:22:c0:cd:56:89:67:81:a9:fc:e4:d6:27:a8:83:25:65:
         c5:91:f0:a9:30:1a:65:8f:81:2a:42:b4:65:38:42:ce:9a:f7:
         26:f7:2c:99:cb:3d:8c:6f:f4:22:67:ea:7e:69:69:67:14:f6:
         17:19:89:58:09:02:a6:cd:e6:54:ee:aa:c0:a4:f2:3c:4a:55:
         d5:b6:47:02:8f:b3:91:71:5d:85:c2:1f:87:57:fd:0f:51:4e:
         c6:b4:f7:32:e7:ca:c3:1d:06:95:97:9e:95:f5:f1:c1:36:ba:
         b7:51:79:20:9b:dc:55:80:66:d8:45:a7:f3:e5:1e:a7:9c:fd:
         f2:36:78:11:92:54:75:fb:17:f6:0e:73:e8:fa:67:79:9c:01:
         bc:ee:36:12:50:3f:9c:50:6b:f7:e2:e4:73:be:b7:ce:df:5b:
         e6:2e:19:32:12:bb:e3:fe:aa:6f:bd:42:e9:e8:a8:1c:25:57:
         39:38:fd:b2:67:58:d3:1b:17:d9:79:7d:ed:50:39:26:93:3d:
         dc:24:29:24:1e:5b:40:2f:fa:ab:de:d1:36:94:0c:65:c3:f8:
         0d:50:db:a5:6c:19:cc:97:b2:9f:11:c4:3b:0a:4f:82:bc:26:
         8f:25:c2:c0:f1:88:e3:bd:74:dd:7b:06:4f:98:99:04:32:41:
         f5:23:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----