Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          2OfiEzJLT/3b0Pie3kPfcGu+mOHN68+gD1OMhQB2fMI=
Subject key identifier:   01:C3:8F:60:BB:E2:93:86:FB:F2:77:91:2D:1E:E0:55:C7:FE:C4:09
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       0195E19070A76E5C35609097EFC266CC9ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 11:01:34 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:34 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:34 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: 8/kSGfvQoOE8abM3R7e055NbG7hH1eFXpqEo/enYnEA=)
                          2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
                          3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
                          4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
                          5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
                          6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:70:a7:6e:5c:35:60:90:97:ef:c2:66:cc:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Mar 29 11:01:34 2025 GMT
            Not After : Mar 30 11:01:34 2025 GMT
        Subject: CN=01c38f60bbe29386fbf277912d1ee055c7fec409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:d2:97:26:d1:af:55:83:ab:d8:3d:2c:09:
                    86:7e:fd:bc:03:93:53:29:c0:18:a3:bb:9c:a1:d1:
                    38:5b:dc:85:77:36:75:d1:e3:01:0d:64:02:35:aa:
                    82:57:91:18:2c:ad:bf:28:04:85:07:c4:f3:8e:1b:
                    7c:84:40:e4:75:3e:25:c8:73:04:e7:21:72:99:5a:
                    57:11:10:9a:b6:9d:3b:70:b7:c5:06:bf:24:dd:83:
                    1f:42:ff:57:40:8e:79:c7:6f:b0:7c:da:99:50:aa:
                    bb:8e:18:5b:6e:d0:69:ae:e1:fb:5f:40:4d:a1:f6:
                    c9:94:44:29:5a:31:77:95:6c:8f:ef:4f:e9:f8:b8:
                    ee:17:d1:48:c2:56:ca:ad:79:9a:99:c2:3f:96:26:
                    32:a6:90:b1:84:20:5c:8c:06:76:df:a8:7d:d2:73:
                    95:bc:af:e6:bf:73:10:b2:57:31:6a:7c:5b:d6:fa:
                    27:70:a7:42:d0:c2:89:2f:26:6a:77:96:d3:59:9c:
                    c9:6d:93:75:5d:d6:03:4d:67:5d:bf:16:f5:5d:f3:
                    97:ed:85:86:51:f7:d9:72:a9:47:2d:a4:6d:70:10:
                    72:49:41:0a:0c:a8:a9:bb:d6:72:da:ba:ae:15:fd:
                    8f:0b:11:b5:c1:52:12:07:a2:f5:8f:09:3e:56:bc:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:8F:60:BB:E2:93:86:FB:F2:77:91:2D:1E:E0:55:C7:FE:C4:09
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:b5:2c:60:53:80:a4:02:ce:48:d4:23:a9:70:1b:48:31:
         b5:43:bf:3c:0d:5a:51:ec:47:6c:f8:e8:0a:13:09:83:1a:cd:
         3a:58:31:ab:b1:0c:95:a1:6f:f3:21:95:6d:f8:84:ec:1d:ab:
         ae:50:f8:27:19:40:89:83:e8:97:f5:5f:c6:f4:07:cd:43:15:
         99:3b:e1:2a:e3:ce:f6:37:26:f4:79:7c:98:82:53:26:ca:49:
         23:76:3e:f9:8a:ba:2b:52:81:d6:d7:ca:c5:e4:21:d7:8f:05:
         4d:b5:99:74:bd:00:2a:f7:b2:b5:84:27:a4:ff:b1:fd:52:76:
         f7:0a:27:73:bf:3d:ce:2b:59:3b:26:b0:34:08:f2:c6:99:06:
         16:31:7d:53:fc:be:ec:bb:7c:fd:ad:eb:ac:2b:a7:d0:bf:de:
         c8:dc:eb:ef:56:26:95:62:e9:23:fe:96:97:2d:d6:3c:de:aa:
         fc:af:1c:bc:71:38:80:93:25:d7:54:52:a3:c3:76:43:db:f5:
         56:af:a0:9e:c2:91:1a:de:8d:7c:e0:e9:1b:aa:fe:6d:4c:79:
         fc:79:d3:49:fe:e5:1e:52:dd:b8:6d:c8:c3:a4:f0:d5:17:c7:
         f5:7e:d2:08:ff:6a:4d:e2:67:b0:79:0c:fe:58:d3:05:08:e9:
         b0:96:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----