Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File:                     9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier:          lNnqWAEhMK26Ro9/AjdhKJ/TgQCXeQotpPhPhrZS5M4=
Subject key identifier:   DC:63:20:F8:F5:EC:2A:5F:C9:E4:89:DF:74:E6:AC:F3:52:7C:28:C7
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer:       /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial:       01962ECF838801F257F8642E2E0FC200C10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number:          0B7B
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: UTWyNFh2NNLOPPv8gnRstxCKRiYzB47jQ/TqQgrVz0A=)
                          2: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
                          3: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
                          4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:88:01:f2:57:f8:64:2e:2e:0f:c2:00:c1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=dc6320f8f5ec2a5fc9e489df74e6acf3527c28c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:d2:fd:55:04:f5:42:4b:0a:91:d8:dc:d8:
                    4b:6e:fe:8f:e4:23:77:dd:26:2e:ad:2c:02:3f:e4:
                    e9:55:9a:63:97:11:8c:e3:04:f4:da:68:b6:d4:c6:
                    d9:97:6c:90:96:ae:14:78:12:b3:72:cf:10:e8:5b:
                    9f:f0:6f:e1:3e:fb:8a:4f:4e:10:0a:6a:99:d8:91:
                    7c:ac:9f:a2:21:2d:79:b3:7b:e8:f0:16:02:1b:34:
                    96:49:98:d0:ac:76:5e:39:da:0c:c3:d6:53:b6:8b:
                    91:7b:47:7e:18:2e:05:ab:5b:b8:f9:18:49:91:6c:
                    a5:14:dc:c3:a0:b7:33:4f:86:36:09:25:bd:9c:00:
                    9e:58:ad:0b:7b:39:dc:97:14:34:9c:5d:e5:c1:22:
                    a2:50:b2:8b:c3:6f:37:80:f2:79:7d:38:99:d2:c4:
                    ea:c6:e1:56:86:6a:af:b0:d0:1c:47:89:5e:18:3d:
                    9f:cd:2c:46:4f:2b:49:9f:88:4e:b6:54:e4:fb:90:
                    e9:d7:a4:0f:2f:cb:2b:5b:f4:98:30:57:68:38:77:
                    f6:d3:c8:1b:33:ff:06:fb:cf:d3:89:0c:ff:77:00:
                    f3:d9:06:f5:7f:f9:41:7c:11:54:78:78:10:47:b3:
                    d3:58:ed:c9:92:0c:73:2d:a0:d5:83:25:43:13:4b:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:20:F8:F5:EC:2A:5F:C9:E4:89:DF:74:E6:AC:F3:52:7C:28:C7
            X509v3 Authority Key Identifier:
                keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:e6:a3:5c:72:b6:17:17:b0:51:2b:79:15:16:69:fa:53:
         97:2b:85:b5:c7:8a:96:21:dd:93:d7:41:0f:7e:8e:d0:9f:25:
         a2:63:1d:42:c8:1d:a4:3c:ac:60:22:b9:4e:8a:33:57:f5:b3:
         31:3e:32:4e:ef:24:39:d5:d8:cb:62:b6:4c:51:03:20:89:66:
         8a:96:80:e3:f4:a2:c7:f2:ed:e8:5c:d1:ff:59:17:16:f9:46:
         f7:c7:a9:37:f6:3c:23:44:d8:2c:82:2b:1b:9f:d1:8c:c9:75:
         69:49:34:42:ee:9f:ab:e5:d1:6a:1a:11:82:6d:18:68:1c:97:
         49:1f:d6:b3:c0:bd:d4:e2:3e:7d:18:9d:42:8f:9e:d0:10:bd:
         bc:f3:3f:e2:f4:8d:fe:ae:0f:14:a6:9b:50:10:35:76:4b:43:
         f1:a3:56:3f:bc:bf:65:4e:f6:7e:70:fa:0d:46:0f:cb:e6:b3:
         b5:58:f2:6a:d4:25:2f:d1:ac:be:6b:a8:e9:5b:39:d0:cf:aa:
         06:7c:17:04:aa:d1:0d:1a:ed:05:ea:fd:00:84:62:83:74:28:
         86:f2:54:f7:d5:02:4a:88:af:53:28:0a:96:9a:7a:9d:a5:ae:
         fc:b6:a8:c2:92:a1:e0:87:21:34:f8:b9:7c:ed:e9:f4:b0:5c:
         6b:4e:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----