Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
File:                     1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft (raw, json)
Hash identifier:          myhv/rvBnAE64yknc2N3Wox6qVKLoZzNskyXDldYSgs=
Subject key identifier:   C7:35:C7:E5:09:EA:21:63:7E:A8:1E:04:42:97:F3:54:12:45:9D:69
Authority key identifier: F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
Certificate issuer:       /CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Certificate serial:       019546DA7324FD734BB9E15887BE5BFAB000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
Manifest number:          0A33
Signing time:             Thu 27 Feb 2025 10:01:16 +0000
Manifest this update:     Thu 27 Feb 2025 10:01:16 +0000
Manifest next update:     Fri 28 Feb 2025 10:01:16 +0000
Files and hashes:         1: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl (hash: 3s3jRG0inP3Q9xBpOFDgO1l36j/Mr/dyzPAAJnXjPdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:da:73:24:fd:73:4b:b9:e1:58:87:be:5b:fa:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
        Validity
            Not Before: Feb 27 10:01:16 2025 GMT
            Not After : Feb 28 10:01:16 2025 GMT
        Subject: CN=c735c7e509ea21637ea81e044297f35412459d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:87:55:b5:bb:50:c8:95:21:bb:70:9e:c8:
                    42:e9:e5:4a:7c:b0:92:e3:70:64:8b:e6:1b:d7:b3:
                    c3:e1:8c:e9:e0:98:ed:3d:3b:32:dc:14:35:d1:bb:
                    38:52:1b:84:14:83:71:1c:b5:43:b0:65:82:25:76:
                    1f:8d:f3:00:a8:8c:ea:b6:11:fe:23:14:d0:b9:e8:
                    17:3f:bd:8d:08:e7:43:98:3c:70:00:60:03:b9:9b:
                    cc:c4:2e:44:f9:14:dd:09:56:c5:eb:2d:2e:4a:6a:
                    2e:4a:31:d5:a6:61:bd:1f:4e:e1:a9:2d:f4:80:8a:
                    fe:04:7a:a6:d9:50:26:58:39:86:ad:13:f9:d1:cd:
                    c8:38:95:b0:12:ea:91:0f:87:b1:0d:25:bd:15:23:
                    0d:72:06:83:6a:24:62:62:ef:fc:d2:14:fd:68:85:
                    7d:52:16:29:13:96:b6:4d:43:95:2f:40:1a:cf:08:
                    33:cc:e7:31:e0:a7:40:01:d8:8d:46:b1:6a:a3:40:
                    f3:48:9b:71:d4:e0:54:68:d6:23:44:b7:5e:98:52:
                    06:e9:88:17:4d:36:31:05:91:64:65:4b:0f:00:80:
                    3a:a6:d4:cd:cc:f2:bb:e4:2b:e4:5f:45:bf:ed:09:
                    65:33:01:37:18:37:27:da:e7:41:20:82:8e:97:9f:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:C7:E5:09:EA:21:63:7E:A8:1E:04:42:97:F3:54:12:45:9D:69
            X509v3 Authority Key Identifier:
                keyid:F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:76:de:cc:b6:02:ea:f1:f5:be:90:2d:73:86:fe:b9:bd:dd:
         4d:8b:5a:7c:4b:de:fb:64:40:c2:ee:b8:f1:9c:c1:c3:d8:98:
         5d:5b:e0:40:dc:3e:5d:13:78:5f:a3:cb:3d:f5:ba:a4:14:c1:
         2c:d4:d0:6a:9d:f9:b1:9f:22:ba:4b:4a:94:69:1f:30:cc:24:
         8e:56:bc:3c:00:5a:62:a7:fb:f9:97:25:92:a3:6f:cb:c6:3d:
         09:e8:32:c6:6b:69:9b:9c:b2:ed:db:d9:e4:8b:ec:9e:f3:6a:
         79:a8:9b:2c:76:60:cd:b4:1b:dd:49:2d:38:86:bc:6d:65:d3:
         74:04:6f:19:06:07:22:13:a5:76:9e:1a:e4:74:74:68:90:0c:
         e1:31:c2:80:bf:90:bf:44:61:a8:0b:35:e4:21:70:92:5a:4e:
         bf:b5:ee:fb:0a:41:53:75:d0:4a:9b:05:a4:9c:05:28:8a:a3:
         dc:c6:bb:ab:9d:32:2d:bd:c6:6e:27:a9:b1:b1:b3:99:86:7a:
         d4:ef:13:9a:72:d7:3a:1d:bf:52:e6:b5:21:b4:c6:84:70:da:
         3a:ef:fa:86:c5:da:39:d0:bf:64:1b:a7:07:7a:60:f9:25:45:
         49:d3:48:f1:ab:04:dc:87:6e:15:bd:b1:7f:dc:e7:e3:9f:02:
         c7:16:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----