Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          C8ri9dlyUHQtRiiMPes89j91K96FdtIxwEDJxeSS8Q8=
Subject key identifier:   83:28:E2:36:BB:A2:55:97:23:B3:20:96:33:3B:F1:6E:6F:EB:92:8E
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       01962F07250DC610A3B228FE4672162F360B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          1008
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: TFU4K8JqmaSOygMI0bhVJEkDzMU58dIWQYC49k/tzRE=)
                          2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=)
                          3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=)
                          4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=)
                          5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:25:0d:c6:10:a3:b2:28:fe:46:72:16:2f:36:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=8328e236bba2559723b32096333bf16e6feb928e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:bb:aa:0c:04:ed:a9:47:e6:c4:dd:da:36:
                    12:39:29:74:1e:96:26:77:32:cb:38:b3:77:08:6e:
                    86:e5:54:ce:fc:18:b8:8e:bf:06:10:ce:bd:bf:27:
                    75:85:45:ad:07:f7:d0:06:d2:cc:21:0a:fd:50:9a:
                    7e:d1:33:68:26:dd:16:5e:c0:d3:ad:51:f9:e9:99:
                    e0:83:b9:3a:7c:b1:c8:e2:a8:72:0a:7a:f4:61:bb:
                    38:fc:86:84:b0:b7:88:7c:99:32:5d:16:09:54:95:
                    5a:aa:51:a6:52:9b:d5:b6:05:f8:f5:f3:5c:9a:d3:
                    02:ba:9b:c0:4b:c5:1a:48:b0:68:60:6c:62:b5:41:
                    7f:6e:3a:56:90:e3:70:6e:67:29:46:00:26:de:07:
                    cc:71:5a:50:95:4c:4b:82:54:f4:ff:0c:1a:05:65:
                    51:60:e2:f9:20:29:28:95:4f:0c:4c:01:9d:9b:3e:
                    a5:09:6c:f8:a3:8a:c0:e7:a0:ed:69:fe:ee:51:c9:
                    4e:e5:ea:d9:32:8c:5e:70:f8:ec:f4:88:de:5a:97:
                    92:81:41:81:e2:59:5c:09:5d:21:ec:7b:18:71:3b:
                    dd:f9:fb:5a:6a:6d:05:e6:b5:d8:4d:e9:ab:bc:a8:
                    b2:38:f9:fb:2a:80:70:39:a5:d7:33:7a:21:62:19:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:E2:36:BB:A2:55:97:23:B3:20:96:33:3B:F1:6E:6F:EB:92:8E
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:55:63:86:b4:cc:cd:9e:98:e9:5b:59:40:70:ce:02:12:
         41:f4:cc:b7:7b:3a:4f:23:90:eb:c2:a7:da:a8:7d:93:a1:da:
         79:2e:de:8e:1a:5b:c4:7d:b8:0a:4e:31:0f:71:8b:3c:69:f6:
         8a:72:68:2b:33:23:6b:c3:b7:c6:3e:c8:8c:48:7c:bd:0d:91:
         88:0c:5d:f3:5a:96:fa:6a:21:34:63:8f:5d:dd:a4:0f:bd:65:
         f7:79:68:ae:27:ea:e1:a7:63:ff:16:bd:b8:ad:25:d0:37:8b:
         27:07:9e:1b:bc:a7:ec:bf:2e:5e:46:f2:a9:e9:cd:19:40:cf:
         a3:93:4f:1b:c0:a4:91:34:c6:11:36:f0:56:8c:08:1f:ef:ba:
         4b:43:09:88:d2:6f:cc:1f:d8:7d:df:05:d1:99:da:59:88:4a:
         ae:f1:a4:1b:2f:68:78:20:ae:05:61:f7:26:fb:17:b2:3d:ab:
         92:7c:40:7b:71:fe:dd:00:0e:41:a3:02:09:48:3d:d6:b6:63:
         65:f8:c5:75:bb:91:67:bf:3c:57:c5:e1:95:8c:f1:7a:9f:0c:
         38:b3:97:68:fa:03:af:c5:c8:ed:01:96:0a:92:94:14:51:4e:
         65:ab:ad:16:ef:56:c2:10:3d:4d:3a:f1:f3:a0:ea:95:80:b6:
         cd:0d:cf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----