Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File:                     t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier:          935w4LZpdMRz7JDsc4RgjnoiTUXdULIuYTdks97QiY4=
Subject key identifier:   AD:8C:D0:F1:D4:70:F5:FA:B8:37:91:07:59:22:6E:E1:95:7F:2A:54
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer:       /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial:       01962F06A0867762CD6476C8615230CB6B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number:          051D
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
                          2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: 5VCi1lgO88V5ZBM6jEQvn04Sz/JLEeJSt+KVo078KSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:86:77:62:cd:64:76:c8:61:52:30:cb:6b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=ad8cd0f1d470f5fab837910759226ee1957f2a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:d2:d2:e4:24:d1:c6:5f:3e:c1:c4:bf:58:
                    dd:0b:6b:e0:6e:c2:87:2e:0b:c3:1a:49:13:90:fb:
                    27:1d:1a:11:fd:21:e7:27:3c:6c:3f:31:3c:f0:94:
                    3d:10:da:b0:85:a2:1b:a2:02:1e:cf:6b:e0:cb:c7:
                    0b:1c:fc:aa:3e:28:49:a5:c6:e1:eb:72:ee:e8:5a:
                    8d:00:ff:2b:b7:c0:ca:da:29:5e:e7:88:b2:ac:65:
                    bd:d7:db:61:c5:e3:68:a6:d3:3e:e7:b3:f0:9f:5c:
                    8e:ff:ef:1f:d1:19:ed:7d:28:39:98:8f:89:18:0e:
                    e5:8e:a1:11:36:a1:72:e3:31:c2:42:33:47:a9:35:
                    c5:f2:6c:8a:43:0a:82:de:05:1d:23:34:8a:07:0e:
                    b5:83:bd:ef:03:0d:1b:72:46:7c:0c:11:b9:14:82:
                    a9:03:f7:9d:da:73:a8:e4:f1:ca:63:38:42:af:d2:
                    06:6b:cf:16:6a:61:b9:40:ee:b2:00:4f:59:08:e1:
                    73:04:0a:a5:81:25:9c:c0:e7:02:bd:be:fc:86:b6:
                    db:70:d0:eb:42:6f:46:95:e9:15:d0:4b:7d:d6:2a:
                    ff:53:e5:48:65:72:cf:dc:ee:ee:d5:4a:a5:17:20:
                    5d:97:95:a8:09:ea:c0:ba:8a:1c:85:d4:87:1f:93:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:D0:F1:D4:70:F5:FA:B8:37:91:07:59:22:6E:E1:95:7F:2A:54
            X509v3 Authority Key Identifier:
                keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a7:92:91:4d:e1:25:d5:5b:97:15:f6:1e:93:41:2a:63:92:
         c5:48:b8:7f:35:27:89:bf:2d:ba:06:0c:da:b7:3c:d5:0a:99:
         75:5a:21:8e:7c:97:27:5c:95:73:e5:9c:57:b5:66:81:92:a5:
         0d:c8:62:d4:cf:e8:94:54:39:93:6d:5d:21:f8:cc:4e:f6:35:
         1c:a0:dd:57:ad:b4:ae:9f:bf:9f:0c:92:66:44:34:54:ff:93:
         f1:57:49:91:d2:4b:80:5f:08:37:0a:9c:bc:92:59:06:78:82:
         c1:65:44:25:99:b4:2f:5e:7a:51:52:32:63:33:0d:56:ad:9c:
         c3:ad:dd:ae:ad:e7:f0:4c:a8:98:e3:d2:9a:6a:fa:82:5a:c1:
         14:bb:f2:02:9f:27:48:85:5a:36:e9:c2:a7:ab:49:4c:86:2c:
         61:81:91:88:80:0a:ca:42:6f:d7:be:26:73:e7:43:bc:93:ad:
         73:f6:ef:d4:39:3d:e8:ff:03:6a:ab:a5:4d:7b:1a:1a:b6:08:
         c3:19:f4:9d:f5:ad:49:c4:e5:b7:d4:9b:02:66:99:10:6b:6e:
         ff:3d:cb:bf:9c:fc:e2:f7:a6:33:fe:b3:dd:a6:04:a3:c8:1b:
         88:3e:07:ea:14:06:b9:b8:64:d1:fb:ae:05:e6:7f:00:37:a2:
         73:43:3d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----