Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File:                     8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier:          f1ln+FIj+SMttv2YFlLKLUWZBwYMy1DOLwoJ2lOWvgQ=
Subject key identifier:   72:8C:09:12:77:FD:EF:89:8C:0F:56:5F:6F:02:69:24:C6:8C:C5:5A
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer:       /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial:       01962FAB686348596A2667D753E8FD26E509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number:          13EF
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: 5/Tajm7gg/dZ4iyNBQAjrw+Ll6Dg6I0t434Bn10vv1E=)
                          2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
                          3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:63:48:59:6a:26:67:d7:53:e8:fd:26:e5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=728c091277fdef898c0f565f6f026924c68cc55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8c:90:80:b5:e1:23:6f:ac:0e:73:bb:82:5b:
                    08:fa:a3:73:cd:f6:62:69:9c:d2:87:db:78:f1:43:
                    9c:a6:60:d5:1f:f1:24:c1:02:6f:52:96:c5:85:24:
                    52:e5:da:26:d1:1e:20:ed:b3:19:12:bd:00:b4:52:
                    9a:d3:78:00:af:df:ab:7c:c7:9e:2b:dc:26:3f:16:
                    30:93:2f:b9:96:c2:4c:70:9c:bd:ec:58:b9:52:11:
                    8b:dd:58:6f:03:f6:40:cb:cf:2a:9f:4e:06:64:a5:
                    fa:2f:55:6c:1d:ba:d2:f3:08:c2:c5:8d:37:cd:2b:
                    16:b0:27:cb:3b:fa:42:8c:85:c0:b1:08:8a:f7:5b:
                    a5:96:f8:55:c0:ce:fa:5e:44:fe:08:f8:c6:9b:cf:
                    76:fb:a7:72:0d:be:29:01:73:4a:d7:6a:4d:dc:25:
                    7b:07:66:7a:89:5b:08:e9:25:4f:dc:2a:40:94:5a:
                    bf:c6:d4:c2:0b:aa:a4:19:78:47:35:d8:c7:0c:89:
                    b6:74:7c:55:36:f7:1c:43:4a:13:3b:0c:4a:e4:09:
                    27:8a:67:0f:4f:41:85:45:c3:13:26:fd:02:0a:23:
                    4e:e7:2d:9e:8f:d7:e1:c9:27:d2:47:34:e2:e8:38:
                    91:c3:38:09:aa:1a:88:f0:bd:ac:a9:f9:cf:73:f3:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:09:12:77:FD:EF:89:8C:0F:56:5F:6F:02:69:24:C6:8C:C5:5A
            X509v3 Authority Key Identifier:
                keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:0a:69:fe:f9:2a:14:a9:9b:26:e7:84:70:a4:bb:8f:7f:
         5b:b5:9e:4f:82:da:d2:15:ee:71:de:37:34:26:a3:df:b3:0b:
         f2:b7:70:af:e9:fa:ec:28:79:17:21:33:8e:19:11:37:0a:12:
         b3:09:99:5a:47:79:5f:68:0c:6d:65:84:0c:8b:79:e7:2c:8e:
         9c:2b:41:e4:fd:d7:2f:fe:0d:0d:b2:d8:e3:44:be:33:6a:b3:
         51:b6:b1:01:4d:18:33:49:98:55:e5:38:12:b6:eb:90:78:cf:
         49:f3:b8:91:38:12:23:d5:86:cb:3d:39:ab:46:10:bf:90:92:
         49:c1:22:0f:a8:e2:ca:df:d9:f5:62:78:9a:8b:d2:67:e4:bc:
         6d:a1:3c:24:1a:23:02:38:22:19:5a:c5:88:91:ac:1f:1a:38:
         1d:e3:97:9d:f8:f5:b1:96:a8:75:77:57:d1:c0:c8:18:ef:c7:
         b8:f3:19:73:54:ae:c7:7d:1f:c4:33:59:5c:08:3f:12:bf:75:
         ef:34:b3:f8:2f:d4:ed:47:78:fe:04:97:f8:37:a7:c8:0a:e7:
         8b:b3:da:58:70:b3:86:78:d1:ba:fa:d7:d2:c2:bd:4e:41:f8:
         a9:30:3a:b6:24:37:28:95:ee:15:0a:4a:90:98:2c:d4:ef:1e:
         46:13:34:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----