Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File:                     2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier:          iplfu593c/Zr4iMMbuMkZvsmln+ehIkbzmdF9sifQT8=
Subject key identifier:   66:6D:AE:68:2D:5C:75:E5:F3:C4:9C:23:A9:75:1A:AA:0C:19:A3:ED
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer:       /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial:       01962E61FF84E03708FC52BAA7F369731F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number:          0441
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: pAF0o+IIiGABqzP1oIj6SSfjM17P7WGUnuB6z0IJBxA=)
                          2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:84:e0:37:08:fc:52:ba:a7:f3:69:73:1f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=666dae682d5c75e5f3c49c23a9751aaa0c19a3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:0d:27:5a:0d:3f:02:f6:1d:24:4d:02:54:
                    02:d4:24:64:85:a6:11:81:ab:65:97:3e:71:8e:ed:
                    e2:bc:c2:0f:b1:81:d8:78:61:d0:f0:57:7f:14:46:
                    88:1f:11:87:66:fa:8c:cf:b8:d6:d8:76:06:e8:d8:
                    f5:3e:10:18:78:bb:c1:7f:42:8a:4a:9b:e7:2c:df:
                    8c:c4:6b:46:bd:37:92:83:8c:33:dd:08:42:dc:7d:
                    2f:a3:13:a5:c1:7b:93:ab:78:3d:cd:bb:22:90:90:
                    b2:76:8a:1e:ae:8d:30:68:ae:9e:34:b9:c2:bf:44:
                    d2:d7:26:22:cc:e2:36:61:36:0c:44:2c:df:69:a9:
                    b0:18:93:ce:9e:3d:18:0c:b0:57:cf:ea:81:c6:6c:
                    f3:10:ea:20:fa:ad:0d:95:8b:c1:52:0a:ad:28:b0:
                    e1:8d:31:1b:e2:3b:7c:23:4e:ea:f8:83:28:d3:d3:
                    6e:ef:05:14:df:ae:38:9e:e1:c0:9b:77:b3:80:74:
                    90:45:9b:12:40:5f:ad:1b:bf:1e:20:d4:94:aa:f3:
                    bd:1b:91:29:2b:e1:4f:ab:6e:76:e0:65:2d:ea:da:
                    85:6f:51:9f:c1:64:1e:a7:2e:99:69:33:f7:58:2e:
                    58:80:cd:27:43:af:78:ae:05:1a:ec:a0:c4:a8:36:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6D:AE:68:2D:5C:75:E5:F3:C4:9C:23:A9:75:1A:AA:0C:19:A3:ED
            X509v3 Authority Key Identifier:
                keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:05:61:63:3a:85:bf:59:d5:65:d1:34:36:9e:3a:da:ab:
         14:10:50:23:84:0e:12:74:e3:f6:27:ff:a7:50:56:6d:bd:ad:
         4e:35:f1:66:87:69:ca:15:3d:0f:a3:c9:cd:3f:9c:6c:38:94:
         86:11:03:d6:07:45:af:e5:bc:1e:6b:77:5d:05:8a:de:0d:cc:
         a5:61:36:ad:5a:62:43:18:62:d0:ef:35:11:f6:3d:ba:51:3c:
         65:8f:66:4a:7e:d7:03:01:6a:69:a7:94:0f:c7:5e:6b:d0:57:
         2e:00:cd:fe:df:2d:1f:58:6e:1b:22:ba:13:d9:8d:d8:7a:f7:
         3b:6d:b8:82:e9:96:f2:84:63:ac:bc:3e:4c:dc:90:ed:b7:22:
         a9:13:e9:42:47:fc:ac:77:99:28:5e:47:3a:80:0f:32:e4:9a:
         bc:7f:24:11:88:02:94:df:00:a9:62:cf:05:5b:71:8b:fa:40:
         17:f0:c0:0a:54:28:7c:c7:ee:31:1c:96:8c:73:70:26:e4:39:
         88:d2:c7:c9:bd:3a:d9:a5:ea:47:32:0a:81:32:ff:f5:db:d2:
         af:23:5c:69:62:98:ce:c0:f2:5b:cb:40:7a:09:80:f6:a4:74:
         36:84:8d:da:f0:80:9a:10:ab:41:71:c5:1a:ec:0c:c4:4c:89:
         12:64:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----