Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File:                     9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier:          zf0PrNTwpkNb+wA5l1XyndD35L7vQdGPKVRKY9wGyYw=
Subject key identifier:   0B:D4:6E:37:0A:FC:67:E1:6D:48:3C:3F:F3:18:7B:D4:66:0F:0F:EB
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer:       /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial:       01962F0702C3716C230C9340F11040685FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: Yok3V47YmNNzgu+0MYFbd0uKEc4OZCRIiVi3WcPiSr4=)
                          2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:c3:71:6c:23:0c:93:40:f1:10:40:68:5f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=0bd46e370afc67e16d483c3ff3187bd4660f0feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:07:54:c0:7d:90:4b:11:dd:1a:c0:40:64:
                    bd:cb:9d:86:e9:84:66:4e:33:2e:e8:45:df:f8:c1:
                    62:b6:ff:db:c3:0d:6e:ee:c6:93:f6:b8:96:13:55:
                    6c:87:bb:fb:1a:a0:63:7c:6a:ad:bc:f9:fb:7f:eb:
                    2b:9e:32:fd:af:83:40:ea:bd:f1:06:31:8e:57:c2:
                    9c:22:92:2d:c1:25:0c:94:e4:76:87:3b:ac:4e:f4:
                    42:15:15:78:aa:53:7a:3a:33:b1:06:1f:4c:1f:d8:
                    28:d6:a2:87:20:79:1a:09:79:eb:e5:96:f2:35:5b:
                    bf:7b:00:da:a1:a3:7e:ec:26:e6:d2:20:c9:65:20:
                    5a:d9:53:e7:23:57:f6:00:eb:c6:95:c6:e9:72:10:
                    77:8b:4c:d3:4e:33:ff:00:f3:dc:04:b4:99:a7:20:
                    a6:c1:22:96:94:09:7f:71:32:3c:8a:dc:81:2e:cf:
                    ea:77:95:2f:70:37:2a:a8:fa:c4:55:55:b4:bb:bd:
                    d9:0c:15:4e:54:b6:a7:3a:26:0d:e5:93:22:c5:50:
                    c6:eb:b8:10:de:d6:35:b5:38:f9:b3:5d:e5:ee:07:
                    46:8c:81:3b:49:fb:53:77:33:c3:c4:5a:6d:6b:24:
                    bb:b1:f2:d4:ce:a4:cd:c1:5d:dd:d9:a8:69:b3:19:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:6E:37:0A:FC:67:E1:6D:48:3C:3F:F3:18:7B:D4:66:0F:0F:EB
            X509v3 Authority Key Identifier:
                keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:07:f0:36:de:2c:39:a9:bd:b5:a0:cf:95:07:b8:82:39:
         10:8e:ee:13:90:4b:df:6b:e8:69:32:a3:51:e4:3f:b0:e9:06:
         e6:ee:14:e2:95:f0:8b:f0:ac:f9:a8:d2:38:60:5a:4f:19:b5:
         d2:80:41:a8:6f:d4:62:db:98:60:a4:45:49:c9:c2:0b:61:b3:
         cc:c8:d2:0f:c5:c5:bb:58:74:d8:cd:11:aa:3e:0f:2c:2c:a5:
         0b:bc:56:95:7c:0a:9c:3f:0c:c9:7a:28:be:98:79:6f:4f:81:
         a4:5b:09:83:26:e5:5c:9e:c5:42:f7:dc:5e:7a:57:d2:fc:1b:
         d9:9a:36:b8:1f:6f:9c:cc:ed:7a:4d:cf:89:08:c9:be:5a:f7:
         fc:ee:23:ee:a1:b8:25:d7:de:a3:38:04:e3:c8:55:4e:de:41:
         14:15:86:2f:f6:3d:d2:2e:14:e2:94:e8:70:15:2b:16:24:b9:
         66:c1:05:87:49:fe:cb:39:76:6a:37:81:81:4c:23:0a:4c:05:
         0f:7d:02:6a:13:45:84:63:23:e3:87:73:89:52:1b:0d:2e:1d:
         c2:8a:74:07:04:97:e2:0a:b6:48:87:59:b0:57:75:0f:a8:fc:
         dc:1a:b7:c3:16:e9:30:2d:2d:4e:c7:c3:ea:44:05:0d:07:65:
         d8:9e:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----