Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File:                     wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier:          MxZPO+asVuJw/cBwfshVNUrGs3u+bRpy3VCna0vZE8w=
Subject key identifier:   CF:76:94:99:F9:04:09:F2:35:21:25:6C:2C:5C:04:0A:41:1B:96:9C
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer:       /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial:       01962F0655E23796E553BF6D50E0C9C4A908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number:          0EC6
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
                          2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: 5PptIiR/C5tebMnoo2FuYcJ9P+PRQeDkDIxPnloFd+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:e2:37:96:e5:53:bf:6d:50:e0:c9:c4:a9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=cf769499f90409f23521256c2c5c040a411b969c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:40:38:d5:7b:d9:c9:41:9f:b6:31:5d:c4:
                    7c:b6:71:4e:5a:c1:41:21:8f:20:f0:06:84:97:dd:
                    28:3c:e2:83:04:cc:c7:df:88:3f:39:76:65:e7:d2:
                    16:d5:b1:1a:d0:83:4b:ad:60:94:9b:a3:0b:8f:13:
                    18:45:b7:85:20:2a:bf:06:1a:6c:77:86:18:2a:59:
                    44:38:e4:aa:4d:2a:f6:93:57:43:57:a9:7f:18:9a:
                    1a:bb:6d:6a:dd:7b:1e:49:da:59:d3:46:57:69:76:
                    82:46:5a:93:97:03:c2:6c:e1:97:99:c9:05:43:6e:
                    2b:02:c4:c7:fd:76:8c:67:29:7a:08:85:f1:b3:4e:
                    5d:7d:5a:97:4b:20:d2:5b:79:2c:34:d4:ee:f4:11:
                    64:11:c3:e0:40:81:85:ff:03:71:fd:25:cf:91:ef:
                    83:d2:d7:94:6b:8b:bf:8b:cd:e7:8e:47:8d:ac:8c:
                    02:e9:a8:61:87:5a:44:a4:23:53:a8:27:1c:37:5a:
                    72:c5:b7:d9:90:88:66:11:4a:8d:47:07:45:88:7c:
                    cc:f0:f1:7c:78:03:e2:72:0f:03:f2:d0:3d:9e:33:
                    40:22:a0:ae:7c:3c:63:3d:6d:df:b9:87:f7:47:bb:
                    1a:37:9d:35:7f:59:a8:c3:98:fa:84:8f:8c:3e:0f:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:76:94:99:F9:04:09:F2:35:21:25:6C:2C:5C:04:0A:41:1B:96:9C
            X509v3 Authority Key Identifier:
                keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:88:0d:ae:a1:e3:6e:ce:f5:9b:9d:b1:90:f7:dd:9c:29:4e:
         d2:7e:8c:09:7b:26:4e:73:31:7a:25:bd:42:93:3b:55:de:42:
         d8:bd:5b:80:33:aa:8e:5d:ed:fc:da:9d:70:cf:c0:38:f1:95:
         ca:57:b9:18:ef:23:9a:8c:6d:0d:60:b5:72:e1:41:a5:82:c9:
         92:f7:68:66:b1:3e:30:cb:96:d3:b2:79:25:74:a8:65:97:39:
         18:3b:10:1f:4b:4a:78:0e:3c:4d:65:4b:2a:bc:02:74:c9:37:
         10:cb:49:67:e3:b0:0a:de:7d:63:ac:03:4b:2f:2d:21:7d:de:
         7e:e6:d5:1b:a5:36:01:fa:0c:48:6f:10:bd:b6:db:6d:d8:a4:
         f1:41:51:5f:c6:83:9f:35:7b:9b:ae:3a:9d:af:79:07:40:ee:
         bf:e1:44:bd:65:22:29:3a:1a:23:76:ea:9f:bb:1d:52:fc:9c:
         5b:77:50:32:39:56:52:ec:8d:19:e4:2b:a1:27:b2:72:14:7d:
         9b:a9:a0:4e:60:83:dd:3c:e6:38:49:75:29:27:87:ea:e0:d8:
         75:b1:09:1f:e1:d8:20:a4:92:16:53:5c:fe:d0:81:2d:95:58:
         18:9d:cd:96:75:0a:8c:d7:13:21:ae:72:0f:e4:84:64:17:a9:
         17:c2:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----