Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File:                     XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier:          g9xcB+o8Y9SE2ii3Xi+13RfJQ7YySl0PDMhXVLPwLOg=
Subject key identifier:   DD:08:20:9A:81:1D:51:7E:3A:EB:E2:F4:25:A2:60:98:EA:8A:E3:8D
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer:       /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial:       01962FAB1304E1CB7D026575057B07FBD7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
                          2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: SOWH9O9e0xV6t218+bHjcvqBiJDCQeT558G7cYoqqFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:13:04:e1:cb:7d:02:65:75:05:7b:07:fb:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=dd08209a811d517e3aebe2f425a26098ea8ae38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:0a:26:3f:0d:bc:64:bf:9a:ce:47:64:65:
                    ea:3c:ac:85:d6:24:66:25:e2:72:6f:1e:19:4a:7e:
                    ad:3c:9d:60:7a:81:64:0e:5c:d5:86:9b:c9:c2:d8:
                    08:81:2b:96:a5:f5:12:cb:3d:c3:0e:80:11:41:67:
                    d4:84:9b:30:df:49:82:4a:e9:73:d1:0e:5b:3c:c0:
                    91:4c:e2:d8:2d:d2:c9:cd:d2:1e:3d:51:b8:fa:aa:
                    f3:cf:70:f1:79:4d:0e:1b:28:35:63:44:fa:ae:b6:
                    8e:24:dd:d0:5f:a6:a0:a1:7b:66:72:d5:70:a1:db:
                    e6:92:4b:ea:03:a8:80:80:47:44:c7:63:75:f0:77:
                    dc:10:2d:98:2f:07:73:0a:28:30:4c:e6:7e:8e:e7:
                    af:b0:52:8e:54:75:96:01:f6:6e:12:51:c7:32:4b:
                    52:a2:f2:58:b7:55:db:52:93:ed:a3:af:4d:43:4c:
                    af:3d:33:b7:d2:62:bf:f5:68:77:1b:55:c6:c8:0d:
                    28:db:ca:bd:65:ff:f8:79:8f:51:6a:53:18:f3:af:
                    24:09:1e:dc:be:2c:46:c4:36:2f:f3:b6:c7:38:b3:
                    39:a1:db:fd:6b:a8:e4:5b:d3:82:cd:cb:5e:b9:61:
                    04:ed:dc:80:e3:7e:89:f4:19:f6:b9:dc:6e:d4:3f:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:08:20:9A:81:1D:51:7E:3A:EB:E2:F4:25:A2:60:98:EA:8A:E3:8D
            X509v3 Authority Key Identifier:
                keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:66:7f:a2:e8:47:f5:95:66:16:aa:f3:e9:7d:1f:7b:c0:e2:
         a0:12:d9:6e:bf:ee:a2:a4:3a:21:a7:a6:5b:a7:a4:1b:88:ba:
         63:fc:01:fe:10:b9:54:7a:05:ae:8a:a4:09:e0:b3:2a:55:e2:
         60:8d:6a:1d:40:6c:96:a5:39:c2:02:6a:47:45:2f:d0:88:04:
         88:62:a0:45:8e:ca:32:b3:5c:91:1c:b9:07:33:e9:cf:9b:3b:
         26:8d:06:8a:89:67:10:d0:2e:ee:2f:62:97:45:95:6a:73:ba:
         02:82:dc:85:db:10:21:22:75:c6:1e:ba:7f:40:54:67:ae:41:
         2a:72:dc:ac:3c:76:fa:ea:72:a6:aa:1a:4b:0a:d2:a7:f7:e7:
         36:d5:0e:cd:4c:15:5a:2c:a9:e0:53:57:72:1a:27:74:35:f9:
         bb:b3:22:f1:b7:48:68:d5:93:4b:0a:27:92:dc:29:87:63:d9:
         d2:66:e9:c1:1a:cf:0c:d8:ac:89:4d:e9:9f:44:99:6e:a7:8d:
         97:f8:42:2b:f9:5f:d6:48:ed:30:11:94:ea:cf:cc:ea:14:6f:
         80:e9:74:2b:4b:12:f1:a5:72:3e:bc:02:55:bc:55:7e:ac:22:
         2d:f9:70:8f:e8:ef:c5:3e:7a:83:8d:85:8a:17:3c:06:34:0c:
         d5:12:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----