Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          fYH6caBfWy/CJRmmYISWPx7Cjs0iW5mQHPK9f+TZH1E=
Subject key identifier:   9E:D5:48:6D:90:51:39:35:69:DE:D2:B1:68:BC:FC:52:8D:14:E3:CD
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       01962DF4315FD8D584294707CE40896EAB10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          06B9
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
                          2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
                          3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
                          4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
                          5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: 0zBz9HX1cIE1EpW/6C0TyqW07o7VxLMEiWMnotYGNMc=)
                          7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:31:5f:d8:d5:84:29:47:07:ce:40:89:6e:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=9ed5486d9051393569ded2b168bcfc528d14e3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:03:6d:91:76:92:f0:c4:97:e3:f4:f2:30:
                    c1:09:1b:61:d6:f3:8d:e3:b1:d7:46:4c:c3:c1:a9:
                    82:12:b7:6c:01:99:2a:20:e8:dc:ba:e4:36:08:ec:
                    64:48:f0:31:aa:17:06:5b:3c:bd:dd:4f:38:c7:82:
                    0b:75:a9:eb:90:dd:c1:15:4a:d6:b8:37:cf:b8:5c:
                    b9:09:a3:f2:1b:bd:96:17:25:b5:89:a3:80:01:4c:
                    b8:df:84:46:29:6b:bc:65:6d:ac:5e:b2:4b:44:0c:
                    27:15:42:c4:24:39:03:32:11:24:f9:24:52:f3:02:
                    b6:ec:b8:2d:84:bb:89:75:8b:b1:88:72:2e:d5:18:
                    b7:72:e0:1a:46:31:7f:ca:17:44:75:e6:a9:ae:1a:
                    3e:16:9a:3e:0b:b2:bb:06:d3:87:54:87:39:4f:cc:
                    4d:63:ba:23:b5:bd:6c:9f:b6:26:0c:1c:f6:e9:5a:
                    ab:98:5a:87:11:1f:16:e1:87:31:ba:51:ee:b1:6c:
                    22:20:45:7b:94:71:89:aa:85:52:49:a9:f7:70:87:
                    ac:94:dc:85:4f:bd:4b:71:a4:e3:b4:92:ed:00:9c:
                    b5:91:40:a8:ac:31:bc:86:ce:83:82:cb:e1:b9:9c:
                    22:81:12:8d:47:ee:f6:4a:05:d5:97:b8:bc:5c:2c:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:48:6D:90:51:39:35:69:DE:D2:B1:68:BC:FC:52:8D:14:E3:CD
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:be:1e:64:4c:bb:79:5c:c8:5e:86:5b:eb:e6:4a:87:02:
         f6:d4:ea:1d:7a:8d:64:e3:6e:7d:2d:8a:37:df:fc:5f:b0:4c:
         6e:82:97:de:5a:3c:71:ea:4a:f6:40:13:13:00:54:97:a7:3d:
         b2:b3:60:e2:5a:66:80:62:43:11:9b:4a:cc:fb:56:85:83:30:
         bc:5b:2a:80:f6:b3:e5:bb:a3:8a:38:68:29:c4:0a:e6:78:3c:
         0d:5f:e5:37:6e:e9:07:b3:8c:46:7d:3c:a8:42:42:25:9b:93:
         99:8e:93:7d:30:7a:ac:5d:61:2d:c8:6c:ab:83:4c:53:d0:d2:
         ed:0b:05:7a:58:f2:81:09:1c:76:00:5c:e4:03:24:59:15:8f:
         cc:79:2a:dc:e7:f9:e3:46:74:7e:04:0f:1c:41:b1:f7:19:f2:
         85:6e:4e:cd:ce:6c:5f:e3:59:c2:dd:9e:69:e3:9c:d0:f9:ef:
         c5:f9:2c:33:d8:fd:bc:bd:f9:91:0b:41:6a:a2:94:8f:62:47:
         62:21:b8:3e:ae:47:00:95:b4:11:06:50:93:11:65:9c:0a:8c:
         60:8d:84:3f:50:de:4d:f1:d4:2d:0e:a8:d7:24:e8:f0:5b:69:
         6c:4a:55:0d:9c:93:8b:7b:3c:d6:b6:c5:93:70:e9:54:38:9d:
         ce:b8:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----