Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File:                     urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier:          gRfBhD3Nh+xc8zLUY0z7lKOfPWmLQm/4WeF+OAfAuTw=
Subject key identifier:   DD:C4:2C:DD:60:07:64:B0:C2:68:08:77:19:C8:39:6E:D2:3A:47:61
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer:       /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial:       01962F742DE7E5B4556F1888A75366F39AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
                          2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: rx5xsbQIlMKTt557h/1ht6Ae48Ob7yY9FApzJbKABA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2d:e7:e5:b4:55:6f:18:88:a7:53:66:f3:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=ddc42cdd600764b0c268087719c8396ed23a4761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:52:b6:df:4a:9c:7e:45:51:b7:4d:35:fd:
                    05:40:17:5b:14:6a:98:bc:3d:38:dc:7e:32:d6:34:
                    04:9e:8c:fd:c5:67:3a:ee:49:bb:eb:c1:46:78:a9:
                    a9:08:d4:3a:b0:0a:48:ac:6c:3b:dd:5f:a8:1e:8e:
                    38:c7:c0:69:ae:b5:1a:e7:78:9a:a4:89:d8:4b:7a:
                    76:c9:d7:f0:2e:90:79:3a:a4:c5:79:86:0d:f4:20:
                    6a:a3:28:2c:5f:5b:96:1f:8a:8e:85:d3:a7:92:c3:
                    ca:0a:03:11:67:eb:74:88:3f:8c:1d:81:46:b0:a4:
                    d0:7f:9e:53:7d:cf:55:07:2c:25:87:e9:41:01:b2:
                    89:7e:d6:87:bf:78:fe:7f:54:cc:8d:df:ca:ea:0f:
                    32:64:d7:2c:ae:32:0e:4c:91:77:e2:cf:36:2b:6f:
                    ca:3f:02:89:e2:71:54:23:dc:26:84:71:ac:e4:82:
                    10:9d:79:de:70:77:a5:ae:10:a2:c6:06:09:df:ed:
                    a7:6b:b7:3f:83:2c:ae:d7:0b:c9:2c:bf:ba:e0:34:
                    66:02:4d:89:99:0e:97:a9:a8:ca:2a:ed:9b:64:e6:
                    19:6b:aa:e8:4d:78:38:2f:58:21:3f:d0:33:47:25:
                    40:9e:29:ae:5e:88:62:d9:e1:0d:ad:f2:d7:30:a4:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C4:2C:DD:60:07:64:B0:C2:68:08:77:19:C8:39:6E:D2:3A:47:61
            X509v3 Authority Key Identifier:
                keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:a3:fa:c7:e9:b1:64:df:54:ee:f7:1e:0f:4f:be:23:bf:
         b2:aa:a3:78:21:93:52:af:2b:1e:12:c6:f3:52:50:3a:9e:8a:
         d2:58:02:4d:cb:c5:3a:7c:58:0f:36:fd:1b:79:90:8c:9e:47:
         ee:bf:c0:28:41:ff:4d:86:2c:bd:90:48:8f:20:79:45:8a:5c:
         c9:0b:a6:1c:c4:55:e2:53:97:77:d4:b7:97:78:bd:dd:ae:33:
         ed:0e:6f:c4:d8:04:4c:e4:7a:88:76:b8:e0:5f:4d:26:4d:14:
         a8:40:de:88:e5:36:51:82:ab:7e:0b:e1:30:8f:70:96:49:e6:
         c1:e5:98:29:ab:44:8f:ca:02:a2:df:91:83:5f:cf:09:80:b0:
         b6:d1:17:53:50:dc:7e:4a:07:3c:c8:ac:da:4a:80:9e:79:46:
         41:4e:db:0c:1b:ff:8c:54:26:46:60:a1:76:e0:b5:84:7f:da:
         56:e3:20:5b:b6:ea:1b:93:21:43:0e:c5:7b:5b:7a:72:94:8d:
         e4:79:2c:76:4b:6e:77:26:01:da:64:36:03:6e:49:86:2a:08:
         3a:fe:53:ea:04:e6:05:3c:1d:aa:58:b7:8f:e0:74:84:29:f2:
         ce:3c:52:8d:84:eb:6e:4e:64:7b:6d:23:36:14:8f:37:6f:f6:
         95:6b:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----