Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          VgAvlTAtXZ124CsYgS+KpmQjptk/U0lnmq/EY9oPBC4=
Subject key identifier:   8E:A8:12:A9:BC:A6:6A:E2:64:01:69:4A:35:A3:88:4F:B6:D1:4D:F2
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       01962F06E2C07AB4C9318D9068AB216A393F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: D3DhFOhTob1tpcuhaGCcfPBfTrXqClGDBDQd/t31G8k=)
                          2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e2:c0:7a:b4:c9:31:8d:90:68:ab:21:6a:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=8ea812a9bca66ae26401694a35a3884fb6d14df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:0d:ae:7b:d6:df:a7:44:c8:ed:b2:de:0c:
                    e5:c6:0d:77:58:4d:83:53:39:8f:2e:fe:26:4e:a5:
                    56:4a:94:97:9d:4b:7a:04:79:e9:b9:b4:75:6c:74:
                    46:70:bc:d4:15:c9:d2:e5:71:83:f7:b9:73:ab:9d:
                    09:9a:6f:57:65:f5:6a:b5:f6:8d:dc:cf:ea:b6:3f:
                    ed:f7:24:7b:25:db:4c:2e:86:55:e4:b8:c2:3a:e3:
                    ba:14:bc:a7:23:60:db:4d:84:95:6c:f8:68:0c:25:
                    22:4c:9c:5f:c4:d0:97:1c:f4:79:73:f0:ac:47:cc:
                    00:27:ab:72:ff:74:47:7f:aa:22:6c:dd:e2:93:a1:
                    1d:0f:cb:72:6e:c8:44:3a:a8:0e:cb:61:ed:15:ea:
                    1c:f3:c7:d7:92:13:88:27:7a:2c:10:d8:36:a1:da:
                    d8:ad:74:7d:e9:50:af:7c:e2:04:76:09:00:8d:24:
                    61:ef:bd:d1:c8:74:1d:1e:4b:d1:be:77:98:34:30:
                    3b:1b:34:5a:2d:cd:65:00:8f:62:81:67:b5:ef:69:
                    22:be:8f:63:37:f0:e1:1f:0d:06:e3:34:da:3c:f9:
                    90:71:3d:e6:11:dc:e1:2b:b9:46:de:c5:38:bd:ad:
                    39:df:5b:54:24:73:88:9a:48:7d:b4:3b:1b:bd:5b:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:12:A9:BC:A6:6A:E2:64:01:69:4A:35:A3:88:4F:B6:D1:4D:F2
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:84:1a:fc:d8:7c:3d:61:9f:da:18:29:90:09:a9:1f:53:
         18:67:50:8d:03:b9:92:ef:8f:47:ec:bb:d6:f5:78:a9:19:09:
         5d:ff:96:0f:5f:b9:2a:26:71:b2:15:b6:0f:24:cd:e1:fd:d9:
         7f:e9:98:65:5e:13:79:50:78:e2:d2:4f:31:64:94:ce:28:8f:
         07:6c:92:a7:ad:45:a6:6b:4a:5d:16:11:5f:0f:07:c3:75:b6:
         c2:39:5d:4a:90:57:4f:3c:6c:52:21:a1:fe:85:dc:62:a1:6a:
         13:0c:35:4d:97:6b:b9:76:b8:49:c1:b8:4d:24:58:53:29:ad:
         fa:fa:2c:4b:bb:44:d1:c3:c3:3f:4d:ca:a8:4d:28:ed:20:27:
         45:4b:f7:ba:98:f3:ed:ce:8b:65:07:62:a9:df:fe:c5:65:8d:
         d1:ce:22:64:fa:38:ec:8f:a9:df:df:1d:54:95:12:76:f2:46:
         ce:c9:9d:7f:7b:ab:a3:9b:62:96:15:4e:76:90:e7:c7:f5:cf:
         62:33:da:33:eb:26:13:96:2d:67:e2:bc:55:98:94:1c:13:ff:
         4c:3f:55:19:e3:a0:28:71:3e:51:fd:81:c4:5b:16:34:f3:a5:
         05:df:58:5d:fa:23:2a:8f:13:0b:0f:b4:7e:34:7d:d4:8a:ff:
         c9:02:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----