Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File:                     rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier:          Rj0Ur1c9Osj3nM5G+0SXov1miIkVIo5t4rfhIsg5sKM=
Subject key identifier:   0F:0D:66:6C:33:66:30:03:88:1E:34:D5:A7:8E:0D:65:91:4D:E7:34
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer:       /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial:       01962E61DB5238D754ADF76C3AD5B36E6334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number:          1201
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
                          2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
                          3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
                          4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: 8IJfVms/U+fbZ/CS5IBXc9EYnAF1QKA0og5BTi+fVu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:52:38:d7:54:ad:f7:6c:3a:d5:b3:6e:63:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=0f0d666c33663003881e34d5a78e0d65914de734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:4e:97:f3:5d:ca:83:4d:fc:57:bc:df:82:
                    3a:c5:3b:f4:af:aa:9e:33:96:90:f6:b5:79:b2:d1:
                    3a:8b:47:87:9e:72:ba:b9:45:dc:2c:49:48:26:38:
                    cb:c6:02:45:07:59:94:e3:a8:7d:06:c5:55:11:ce:
                    0d:7b:40:16:2a:0f:25:a8:51:bc:f3:35:1e:11:f6:
                    05:eb:99:59:88:5f:14:2a:fc:bf:2b:31:b6:1c:92:
                    a9:f7:4f:4d:8f:19:52:04:fa:7c:1c:d7:af:5f:59:
                    2b:af:91:0f:42:3a:85:fb:8b:db:bd:df:7d:d7:05:
                    31:90:5c:3a:e5:2a:84:61:72:d3:7a:a9:82:7b:2d:
                    7c:7c:86:18:b5:43:e6:5d:c4:eb:75:43:e5:92:e0:
                    6a:2c:05:61:47:ff:c1:dc:db:06:39:32:d4:b6:99:
                    b5:5f:e6:74:47:78:4f:a2:81:37:5b:31:3c:bc:0e:
                    9b:5b:f5:c6:64:e2:a2:71:ed:32:53:49:88:e0:5e:
                    1c:6f:98:9e:14:de:32:7b:09:ba:26:3d:f8:28:1a:
                    a4:79:c8:c4:9c:88:fc:80:e5:29:48:08:65:98:cf:
                    db:c0:de:e3:c2:37:82:a0:c4:89:0a:ba:39:7f:dd:
                    55:f7:b4:30:b5:cb:be:fd:d4:19:6f:9f:67:56:91:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:66:6C:33:66:30:03:88:1E:34:D5:A7:8E:0D:65:91:4D:E7:34
            X509v3 Authority Key Identifier:
                keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:4b:60:15:ee:62:75:fd:ab:69:46:91:8e:12:cd:b6:90:
         13:df:30:5b:d9:ce:af:11:49:7f:27:9a:c5:9e:54:1d:d6:c8:
         88:51:6f:2a:79:41:3c:10:b1:05:94:31:dd:35:df:b3:db:0f:
         a1:4b:52:ac:ed:eb:11:55:37:82:cd:ca:b5:d0:31:83:88:17:
         9a:56:4e:4a:e4:25:22:de:4d:31:3b:a7:9e:ce:79:c7:fd:c2:
         23:17:3b:e4:7b:87:d4:07:84:26:e3:e0:bc:46:10:e0:1e:30:
         2a:d3:75:dc:3b:35:09:6c:38:70:8c:13:52:3a:51:f3:79:16:
         ec:0d:6b:98:54:14:c9:64:47:04:05:44:50:8d:08:d1:74:ab:
         c9:d9:31:ba:b9:11:ca:cf:0c:0a:d4:55:94:51:b9:2b:21:38:
         4e:fb:5a:db:31:07:ca:46:dd:7a:69:10:5b:69:ef:05:72:00:
         19:94:71:7c:5a:a4:75:dd:0b:98:32:c3:9c:90:41:d0:b9:19:
         58:2c:6f:8c:24:15:7e:90:d6:11:74:2a:f7:51:64:5a:f7:ea:
         0c:9c:61:60:66:26:85:1e:4f:41:97:95:c7:d2:0b:e7:56:38:
         a5:34:2d:fe:93:d8:54:04:b0:2f:0c:d0:2a:50:e0:1a:8b:98:
         1b:27:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----