Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File:                     R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier:          1q1mdEraF2pIOF4lR10bI9EszdEBd21tF6V0ZgQtfBI=
Subject key identifier:   DD:55:AB:D0:52:18:9B:20:B3:B6:AB:D9:88:AA:28:C3:D5:3D:E3:AE
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer:       /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial:       01962DF3CD0B8030DADA408FC14F474650B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number:          04F1
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
                          2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
                          3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: ERMXnSFr6tO0v/kaNJYphV27ygXNhtjBZRMs5D+p3pc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cd:0b:80:30:da:da:40:8f:c1:4f:47:46:50:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=dd55abd052189b20b3b6abd988aa28c3d53de3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:37:c9:d1:75:57:6b:17:f0:09:d8:b4:bb:
                    13:fb:9b:99:7b:3c:29:bb:69:7a:4a:d4:54:18:fc:
                    f2:39:98:11:4b:c7:1e:b0:ea:46:92:fc:93:c4:22:
                    07:0b:4c:2c:b1:e0:ed:18:6a:af:00:34:17:bf:eb:
                    e1:5e:ec:7d:85:d7:b4:b5:f4:d6:75:59:bc:36:22:
                    f6:d4:98:34:a7:93:79:06:82:74:f4:5c:94:ae:7d:
                    9a:92:6e:65:04:0e:6c:8a:0b:56:c0:69:39:2a:2c:
                    af:c6:08:8a:2e:01:77:1e:e9:46:42:da:96:cb:a0:
                    02:72:17:c6:ec:6b:a6:99:1f:3f:b4:40:17:d3:da:
                    6f:90:d0:93:f6:fc:e5:9d:41:13:ed:ce:bb:bf:6e:
                    ff:05:34:32:10:55:c9:77:08:67:ff:4a:79:27:cf:
                    6d:9e:35:34:4b:e9:58:d9:2b:d5:9a:f0:fd:5d:0f:
                    a0:c9:59:fc:94:00:00:30:47:59:be:00:56:ed:25:
                    1d:e5:1d:85:17:11:1f:82:4d:fe:9e:ef:7b:26:78:
                    0a:3b:59:f3:9f:26:fa:74:93:e7:ff:23:83:f7:64:
                    3e:b0:ae:8d:69:01:98:f7:ff:b8:c6:07:d1:b3:fe:
                    2c:1f:be:dd:8b:ad:6b:8f:05:0b:d9:60:2b:7b:e8:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:55:AB:D0:52:18:9B:20:B3:B6:AB:D9:88:AA:28:C3:D5:3D:E3:AE
            X509v3 Authority Key Identifier:
                keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:33:87:09:24:98:80:f0:bf:76:99:22:fe:2f:14:d1:5f:
         f3:a9:e0:4b:2a:40:d1:82:29:36:95:61:1a:4f:e5:7a:35:25:
         e4:bc:a7:78:d8:a4:a0:f9:6d:2e:17:a9:0a:c7:47:4f:25:7c:
         d5:b0:e7:cb:1c:35:88:8c:37:95:41:3d:c7:c2:4a:38:3e:1f:
         ff:91:5d:fc:75:9a:a6:0e:ba:af:d5:65:dd:49:c1:33:32:c9:
         e0:7b:2c:6f:86:8e:2f:26:18:1f:50:0c:f2:9f:95:2e:0d:0c:
         5e:04:6a:77:ea:ce:9e:9d:8f:6f:95:1b:48:a1:2e:15:41:a7:
         8b:57:b7:d6:d4:ef:bc:18:8b:19:c5:fb:98:74:4a:59:cd:68:
         92:d7:31:2b:7f:de:32:dd:3d:dc:b4:66:e2:8e:a7:7c:c4:8c:
         d1:e7:83:db:40:fb:8d:e2:b9:d8:9e:81:e7:3d:0c:02:98:ba:
         da:39:d5:b7:2d:35:2f:5d:63:1d:6b:52:08:9a:e7:68:ef:63:
         22:8c:04:3d:ce:a3:3f:f3:63:5b:3a:80:08:67:06:8a:85:6e:
         5f:eb:1a:9e:b0:60:29:6f:f7:8d:99:72:8c:7a:f4:d2:f1:43:
         7e:a6:a8:ea:a0:a3:1b:b4:ff:e0:ee:b1:a2:5b:22:47:28:e4:
         d8:8b:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----