Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft
File:                     9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft (raw, json)
Hash identifier:          Rs0qxqpRwJMlnBq+eeaOx+fr0BDGOkTgF9/rknfeuRA=
Subject key identifier:   7F:BE:2D:83:52:12:DB:02:83:91:A2:79:68:9F:86:06:89:1D:CE:C3
Authority key identifier: F4:F7:76:09:40:80:0B:86:F8:08:6E:20:9E:DD:1A:85:BA:C0:F5:DC
Certificate issuer:       /CN=f4f7760940800b86f8086e209edd1a85bac0f5dc
Certificate serial:       01931DAC4F74B5B0B1187ED9B01E1D177BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft
Manifest number:          10D9
Signing time:             Tue 12 Nov 2024 00:00:51 +0000
Manifest this update:     Tue 12 Nov 2024 00:00:51 +0000
Manifest next update:     Wed 13 Nov 2024 00:00:51 +0000
Files and hashes:         1: 9Pd2CUCAC4b4CG4gnt0ahbrA9dw.crl (hash: TZGxOeNcHLmLvuSJ8o5XdR/RsGbGK0z8WtWWS/XEp8k=)
                          2: spxBFrRTXksX8fvfc0dXhGkhiwE.roa (hash: n9jU/0B6fjkLFx2dvO1H12A4sA1hG6j4sPdVGTQx1Ss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1d:ac:4f:74:b5:b0:b1:18:7e:d9:b0:1e:1d:17:7b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7760940800b86f8086e209edd1a85bac0f5dc
        Validity
            Not Before: Nov 12 00:00:51 2024 GMT
            Not After : Nov 13 00:00:51 2024 GMT
        Subject: CN=7fbe2d835212db028391a279689f8606891dcec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:d9:2e:40:c2:2a:7c:1b:30:89:20:85:f5:
                    18:2c:d1:b5:d9:24:53:f3:10:a9:f2:5d:7f:13:18:
                    7a:97:1b:4a:9d:c3:d1:9b:72:13:73:1c:c1:c6:1b:
                    70:24:11:3f:06:8e:01:9d:eb:9f:7d:bf:c6:c7:e4:
                    5e:83:6a:0d:06:1a:4d:02:3b:23:c5:59:bd:d5:ba:
                    00:00:75:e5:e2:54:4b:79:1e:fc:3c:48:df:e7:01:
                    7d:f0:2d:ad:2e:e3:52:43:49:42:eb:3f:a1:35:83:
                    0e:a9:19:c3:e7:ee:ca:4f:bf:cf:f8:1c:5c:26:57:
                    56:5d:31:45:0f:84:a4:f2:8c:7d:3d:ff:83:77:f3:
                    a3:ca:9c:27:9c:61:84:a1:d2:21:de:83:46:c3:33:
                    ee:9e:e0:2e:3e:33:9c:ef:90:a8:85:b5:6f:bb:5a:
                    de:f3:92:ea:ee:8f:4c:27:40:84:2c:71:e6:e9:a6:
                    75:29:cc:4b:76:b6:d6:f8:6f:ae:c0:81:be:ee:47:
                    dd:1a:5a:01:23:83:80:ba:90:37:56:5f:d9:d1:79:
                    ec:9c:30:d5:d5:f7:ee:4f:ac:5a:e7:1b:40:93:df:
                    91:7a:d7:61:59:99:71:1e:39:7f:ca:68:48:46:96:
                    54:2b:e8:b5:c5:bd:2f:c1:c5:c0:3d:f3:b0:14:8d:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:2D:83:52:12:DB:02:83:91:A2:79:68:9F:86:06:89:1D:CE:C3
            X509v3 Authority Key Identifier:
                keyid:F4:F7:76:09:40:80:0B:86:F8:08:6E:20:9E:DD:1A:85:BA:C0:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:90:23:99:a5:7e:63:47:8c:92:e6:30:ef:a4:df:29:c9:
         95:e7:7b:74:18:09:dd:96:b2:8f:28:a7:5e:59:db:a6:1a:6d:
         7a:67:17:e5:11:88:61:ca:f8:66:1b:1a:f2:09:8c:ef:d4:c0:
         a4:66:58:a8:42:1c:72:4b:43:df:45:61:3c:61:f4:68:f7:aa:
         36:17:a3:39:81:87:34:bc:6c:fa:b1:6c:60:ea:ff:86:14:e3:
         0c:77:06:6a:61:65:69:f1:f2:79:06:9e:21:20:6f:4c:98:40:
         da:4c:11:fe:69:0d:24:e3:be:a9:c7:a9:c6:b5:d1:76:e7:a0:
         51:35:36:39:4f:78:9a:3c:07:90:b8:57:e0:9b:7b:2e:85:e9:
         b4:96:c3:5d:94:a4:b0:56:19:55:fe:0b:d3:45:27:07:f8:a5:
         c2:a8:3e:7a:33:41:75:d6:06:9a:ab:4c:07:f3:13:c4:0e:32:
         65:f3:1f:86:76:55:ff:c3:58:5b:47:c5:d2:4f:5e:61:b0:25:
         49:5f:3f:48:59:1d:fe:ef:3e:86:23:fe:40:fe:b4:9d:9d:a0:
         b5:d1:27:59:23:14:65:0b:a9:69:71:fb:06:5d:36:e5:ca:34:
         94:f4:c1:fb:e5:b9:a0:0c:e7:e3:08:8f:3a:72:23:13:16:d8:
         15:78:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----