Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File:                     dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier:          MTXSXoDuk92MA3ONZLkarOpo7JrME++DqlUYXcpzBbE=
Subject key identifier:   61:90:54:CB:31:2B:E1:5B:2E:2F:76:4E:BE:85:DC:EB:67:F9:E6:A2
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer:       /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial:       01962E61DECE8BE06F840535F43FF044B63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number:          0E55
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
                          2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: WEHDFN0d+q+TANcymVTA1PiplxdmXYhrae+3bRyy23A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:ce:8b:e0:6f:84:05:35:f4:3f:f0:44:b6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=619054cb312be15b2e2f764ebe85dceb67f9e6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:cd:e0:c3:83:6a:a5:b5:08:53:1d:10:8c:
                    cf:ee:ef:88:a3:a6:b2:5d:63:51:00:76:60:eb:90:
                    94:06:ce:24:48:e0:2d:44:75:23:ad:ad:cc:9f:14:
                    1a:ac:3b:5a:da:7c:0f:07:18:68:d0:aa:46:10:f6:
                    40:c9:ed:b0:a7:b3:70:7d:11:45:ad:fb:4e:1a:54:
                    0d:c4:62:da:56:17:45:de:d8:cd:e5:3c:2c:8d:57:
                    f3:7b:9b:68:f5:09:03:cb:7e:a9:92:37:a9:a3:b7:
                    79:c0:92:17:da:b6:06:b3:9f:6d:d6:df:70:a1:48:
                    0b:d1:96:6f:a8:2e:db:69:00:d8:df:84:c2:75:9c:
                    1c:1b:b4:96:f8:20:2e:4b:c2:56:d2:18:2a:08:43:
                    c4:31:60:8f:c2:0a:bb:a7:96:ae:4c:f0:2e:d1:da:
                    f6:1f:e2:8a:a4:b1:8c:82:63:2d:5e:de:8f:b8:e8:
                    cf:84:d5:e0:53:af:61:b7:72:22:50:54:5e:5b:35:
                    da:78:b9:6b:80:43:8e:d3:e9:4a:48:61:82:d5:de:
                    54:f8:67:0a:d3:13:fa:d4:33:45:fc:88:6d:7e:2c:
                    80:29:34:16:35:79:83:fd:0a:1c:02:e2:1d:a1:cd:
                    39:a9:f6:80:f7:a2:df:0a:88:6a:ad:55:1d:cb:55:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:54:CB:31:2B:E1:5B:2E:2F:76:4E:BE:85:DC:EB:67:F9:E6:A2
            X509v3 Authority Key Identifier:
                keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:a6:82:26:cb:82:d4:d0:cd:2c:6b:8e:2d:1b:fa:b7:92:
         fa:c6:f0:4c:02:b0:c4:9f:ef:6a:d5:22:7d:75:ba:4a:aa:9d:
         8b:d8:b9:fd:f1:20:f0:05:96:bd:9d:69:68:fd:1d:9c:9b:24:
         43:9e:13:79:38:5b:e1:43:02:36:40:34:da:76:f2:49:c2:41:
         d5:07:a0:ec:4d:89:1e:c6:8d:30:82:c8:73:ed:df:15:47:64:
         3f:fd:f0:a8:33:42:2d:6f:4e:b0:07:2e:58:9c:b8:12:a1:3e:
         16:40:53:ba:0f:7b:38:ac:6f:fe:2a:e2:d2:ad:19:00:36:5f:
         a2:17:41:fd:3c:b9:85:72:29:67:1f:f4:3a:99:37:08:b3:35:
         c6:64:2c:da:dc:20:38:1a:c8:89:f4:19:66:83:2f:7e:d4:a1:
         0d:ee:74:f6:c9:ee:2f:c4:e2:9e:5e:9c:f4:0f:bc:35:2b:8b:
         9d:f4:f2:d9:ea:2b:96:0c:d6:73:b5:a6:f6:7e:90:dd:fa:a2:
         35:93:5c:fb:e4:94:45:d7:68:4e:30:2a:3e:47:b7:08:09:58:
         18:ea:d6:43:76:e5:07:d4:01:97:b8:dd:b0:e1:c4:8e:1f:3d:
         eb:d3:52:cc:47:29:2d:69:4f:ef:e7:c2:84:dc:ff:80:d1:61:
         d9:0d:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----