Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File:                     DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier:          lVMbYv9m80OommEPflKgraLhe3mP4e4CSV6iT2kTEiE=
Subject key identifier:   55:D3:B6:FC:6C:02:14:2D:F8:42:49:E4:6A:4B:B9:E6:97:72:14:1E
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer:       /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial:       01962E2B1F674E52A90592C4A6DB1308ABCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: cD/nUnMhfkE4a8MxubSH4vn+9tChtnAOvN6TEp88LsY=)
                          2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:67:4e:52:a9:05:92:c4:a6:db:13:08:ab:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=55d3b6fc6c02142df84249e46a4bb9e69772141e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:de:34:74:20:44:c7:e3:47:fb:7e:83:e6:51:
                    49:93:f7:54:e4:64:62:5f:aa:cd:80:e6:8d:e8:6f:
                    dd:c6:1b:0d:2a:50:a1:4d:a9:3a:ea:f9:6c:ad:e1:
                    da:2a:20:dc:57:c6:57:a1:48:3a:ae:f9:4b:18:e3:
                    ca:66:4b:45:f1:58:9a:49:c8:06:1d:4c:84:90:f0:
                    25:90:49:ca:4b:cd:42:8b:30:82:59:70:dc:5b:a5:
                    cc:e8:9d:1d:c3:de:af:2d:8d:d5:88:d4:71:35:87:
                    27:fc:e0:06:a4:91:e3:fd:46:9a:56:b2:e3:7f:52:
                    5b:10:74:f3:f7:15:74:68:92:c8:e7:d5:81:a3:60:
                    ed:b2:80:f7:4f:25:a4:ae:00:ba:77:84:83:7c:99:
                    c1:89:a5:03:f5:8f:30:a0:d0:e4:03:ac:b0:9e:ef:
                    14:5b:6d:84:59:6b:21:b7:85:a7:51:5d:29:6c:33:
                    b7:22:89:69:4f:4f:63:5a:3f:4a:8b:b0:d5:f4:89:
                    c8:0c:f3:b0:26:7f:a6:bc:5c:a7:67:bd:29:5a:83:
                    83:ed:d7:ec:1d:47:9a:ff:48:95:76:65:95:bd:0c:
                    5f:6d:54:43:83:86:3f:88:4c:e0:d7:8d:9e:73:5d:
                    5a:0e:a8:be:d0:e1:04:10:c5:20:75:b0:28:5c:55:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D3:B6:FC:6C:02:14:2D:F8:42:49:E4:6A:4B:B9:E6:97:72:14:1E
            X509v3 Authority Key Identifier:
                keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:35:c8:5a:16:cd:d7:04:da:c5:b4:75:21:4f:5f:a2:b9:
         af:92:5b:44:4f:ad:bd:1a:78:e8:23:4e:de:73:f9:8e:ab:f8:
         ac:19:5c:eb:9b:67:43:90:91:0f:9a:13:f2:fe:c8:5d:6b:e5:
         da:0c:12:d6:e1:9d:36:ac:a2:ca:d1:ad:6b:f1:41:fa:c5:06:
         db:da:45:23:e6:1f:1b:18:5b:51:8a:b3:ea:f0:ed:f8:84:a0:
         af:d1:30:0a:fc:85:fe:1e:a0:0d:8f:6c:08:29:80:12:c8:70:
         f3:2c:db:9d:8e:d4:43:2e:bf:5f:0e:70:42:93:5a:c3:bd:b3:
         e9:2f:6a:d7:77:40:3d:83:a1:eb:48:1a:bc:29:82:fa:f0:64:
         c9:e8:3f:60:ee:1a:18:39:89:8d:5e:90:e0:79:83:15:13:60:
         35:f0:ee:08:02:d2:ba:9f:b9:6e:b2:b5:86:05:a9:00:7e:ac:
         15:22:cf:55:39:a7:aa:ff:d4:99:53:6f:5b:37:44:50:0e:fe:
         96:5e:01:25:cf:dc:d2:15:dd:b5:2d:6e:e0:28:15:f6:cb:bc:
         f7:65:31:d9:8b:24:59:ea:da:ad:7e:2f:4e:6a:ac:a0:ee:d4:
         c5:b8:c9:87:d8:02:ea:23:b2:4f:0f:ce:bd:e8:c2:e8:3a:37:
         d7:a4:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----