Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File:                     5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier:          FOJhlotVwWiIqpCSxuwpQ4oLeVjTToiGMPWqwKzSvQA=
Subject key identifier:   C9:C3:52:AB:4F:27:5F:C6:4A:AC:56:2B:95:D0:AB:85:24:15:DB:1A
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       01962F747B0CDA79FE2E1FF1B1B583093F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number:          02D5
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: C0y8eYEBimwalsfuG2Zxev7NUZ8MWdGq4D3zObrPsIg=)
                          2: XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (hash: HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:0c:da:79:fe:2e:1f:f1:b1:b5:83:09:3f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=c9c352ab4f275fc64aac562b95d0ab852415db1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:18:93:96:70:6e:57:0e:ff:86:19:50:1f:
                    92:76:4f:60:09:8d:f5:a2:62:9a:9e:63:c8:ac:66:
                    01:61:7f:91:c5:b0:9f:16:bd:99:75:cf:dd:33:b3:
                    c3:6c:bf:6a:44:a1:7b:d5:bb:3b:52:32:89:50:68:
                    13:39:58:98:06:8b:58:5d:bc:dc:cf:cb:3d:b6:ae:
                    ca:e2:d4:45:05:5b:a7:2d:c0:1e:5f:8a:29:e9:72:
                    be:d3:df:9d:0b:55:84:13:f2:19:ee:3c:1a:44:22:
                    6a:38:b2:ed:a0:87:86:32:1b:31:0f:dc:57:8b:b8:
                    63:ba:8b:26:af:95:52:b0:92:5a:33:51:4c:ca:66:
                    8e:ab:c6:40:ed:e0:ca:46:22:85:e2:b3:ef:66:af:
                    ef:12:57:d1:16:c2:63:79:22:71:80:db:0f:72:b9:
                    89:81:05:db:68:f4:3b:86:e2:c4:3a:5f:e2:78:f3:
                    cb:e4:5f:86:c8:c3:30:45:e2:7d:4e:84:ea:c4:d8:
                    c2:fe:86:c0:eb:0a:ed:5b:7f:43:6b:9a:cf:36:1a:
                    33:3d:43:c0:e5:ef:8a:0a:ed:e4:75:3d:98:84:ff:
                    9b:fd:ea:cd:95:d2:ed:1e:56:ab:7c:78:d4:57:f9:
                    eb:a2:fe:2d:4f:e9:fa:fa:c6:5f:75:74:55:d1:4c:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C3:52:AB:4F:27:5F:C6:4A:AC:56:2B:95:D0:AB:85:24:15:DB:1A
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a0:03:4e:e8:c5:43:f9:89:04:13:19:a1:e0:eb:52:e1:b5:
         58:b2:2b:42:aa:1c:ba:1e:1d:8e:15:c7:b1:a4:5c:2b:d7:fa:
         a5:56:a7:40:c9:a0:f8:88:38:28:1f:97:be:66:73:e2:33:9b:
         4a:39:30:3d:8d:a7:27:0d:27:ab:6c:6e:5e:b7:7c:14:11:ce:
         a6:c0:a8:01:8e:ea:1a:83:4c:c1:84:28:6a:66:1d:be:72:71:
         7d:3a:1f:8a:4a:6f:42:35:a5:4a:0c:d2:c0:cd:fe:9b:91:0f:
         b5:39:34:aa:77:55:6a:cd:05:ab:fb:ab:78:fc:07:41:03:ca:
         1e:f6:4b:62:93:cb:87:ef:8a:89:68:b7:ff:e5:83:bd:34:38:
         bf:36:5c:b0:0c:29:c9:0c:64:c3:3f:c1:c9:2c:20:c4:8c:06:
         df:12:62:95:26:7d:2e:d4:19:fe:72:65:1d:1e:12:aa:cd:5c:
         a0:05:ae:2e:90:f5:e7:0c:f8:37:1a:6c:b8:a8:cb:f1:9d:a9:
         65:90:ed:fd:a2:d4:d0:14:00:e7:ee:57:5e:58:b9:1b:a7:9a:
         61:82:31:77:57:8c:42:f4:b1:22:55:a6:1f:9b:08:1d:86:11:
         14:a9:9a:c1:5e:79:2b:d7:b7:09:0f:9f:71:41:1e:67:6e:0f:
         1d:99:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----