Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File:                     2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier:          gWuciaoICVXRHAifABFhuXMnsSj6CZp23jCLBMo9SyI=
Subject key identifier:   DC:C4:EE:05:6E:F6:05:AF:18:67:74:C1:44:2D:A4:EE:1C:0C:9D:40
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer:       /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial:       01962F747F089DD14432570C4E94D4362376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number:          0AC9
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: T5vaWI3OkAhR3SRmWyn6qBNtme39W6dr1PSJ+SnwaRk=)
                          2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:08:9d:d1:44:32:57:0c:4e:94:d4:36:23:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=dcc4ee056ef605af186774c1442da4ee1c0c9d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:4b:04:cb:d3:6c:68:ff:e8:70:49:43:78:
                    fd:17:91:a3:6d:b0:33:8c:cf:e9:25:2d:fa:78:da:
                    02:a2:67:c9:27:5e:77:31:34:4a:c0:21:0d:c8:5f:
                    9e:fb:be:8f:90:cc:c7:55:5a:e4:5e:36:a1:13:b1:
                    0d:0d:f9:72:b0:7e:0a:57:63:e4:f3:69:af:44:6d:
                    fe:38:16:b1:28:1c:e4:78:85:72:3e:95:cc:7f:66:
                    fb:43:67:db:62:25:ce:0c:9e:97:d4:b1:3b:6b:9d:
                    fe:49:5d:cd:29:1c:9e:5d:d0:85:4a:4d:0f:9b:45:
                    6d:b2:cc:4e:cb:1a:16:45:3b:5a:b8:a9:45:05:6d:
                    7c:ae:6a:95:04:77:44:c1:83:d7:a2:c4:98:df:36:
                    bf:22:c0:1c:8a:b6:b5:c0:94:63:32:33:31:59:f2:
                    cd:6f:f7:d0:9f:bd:f3:cb:25:cc:74:2e:0d:17:78:
                    61:7a:2b:3b:84:b4:8c:b5:cf:b4:2d:0a:d5:e6:d2:
                    5f:f9:99:61:ba:a6:9a:a3:b3:b5:c5:db:a6:e5:37:
                    ef:0a:73:ea:23:1a:89:54:af:5d:f2:2a:8c:8d:71:
                    f1:71:1b:63:2e:a4:df:42:a2:50:84:1a:c4:af:e0:
                    09:9d:86:3f:50:b4:93:9b:93:31:3f:a8:98:b7:79:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:EE:05:6E:F6:05:AF:18:67:74:C1:44:2D:A4:EE:1C:0C:9D:40
            X509v3 Authority Key Identifier:
                keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:f2:ff:f7:2e:10:71:1b:d3:74:17:fd:4f:77:ac:76:02:
         bf:bf:22:17:ef:43:0d:e1:51:91:f6:2e:3b:aa:61:6a:8b:bc:
         2f:84:b4:f4:da:c2:1c:39:9d:9d:00:b1:0d:fc:15:c1:4c:86:
         ef:59:94:df:04:47:63:57:f0:cc:d6:6f:b5:0d:84:e7:1f:da:
         8c:24:15:2b:bb:30:e3:73:81:21:a5:95:0a:f5:2c:da:15:b5:
         2f:69:7e:c1:8a:85:16:d4:5e:bd:08:82:ac:31:3a:a5:08:a9:
         c9:b9:96:59:13:12:09:9d:92:c9:ca:69:ea:1d:71:d1:e1:d6:
         33:3f:96:99:40:52:92:2e:4f:e9:79:b5:93:d0:a4:03:5b:13:
         d0:36:38:9a:30:57:9e:62:df:b3:ae:e4:55:c8:44:94:94:a7:
         d8:0d:69:53:71:61:55:36:ec:7d:fc:90:30:0c:47:ff:40:de:
         b7:60:63:43:4a:d4:c7:ea:7e:fc:8e:45:49:4c:75:53:04:a6:
         b4:1a:b0:5f:66:37:86:3a:13:7a:25:ea:ff:b2:e4:3a:da:b4:
         ee:49:ea:f0:cf:18:1f:be:cf:72:06:c5:5e:8a:87:5a:9a:04:
         22:f8:ba:3f:ff:1f:60:a4:4c:8d:7b:1f:54:d4:ea:ad:bf:71:
         72:ed:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----