Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File:                     REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier:          pFmJFbuvP6ThdtfqfGLfTNXSNN83fZu8daDrho0AT+E=
Subject key identifier:   16:D3:34:41:D3:D9:9A:A9:91:DC:DA:9A:EA:4B:B2:DF:EE:FF:70:AB
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer:       /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial:       01962DF3A9292A42B821CBEB0A68700C7075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number:          0B1D
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: gnZMk3uWMl5SAoi7q4KXxXG1UwzbwMHl2L+IR3TGgOg=)
                          2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:29:2a:42:b8:21:cb:eb:0a:68:70:0c:70:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=16d33441d3d99aa991dcda9aea4bb2dfeeff70ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6f:ff:9b:f4:e2:ee:a2:a7:50:40:da:41:66:
                    27:a2:53:42:16:ed:fc:1a:3c:cf:28:af:9f:dd:86:
                    33:43:42:8c:f4:2b:d5:80:fa:62:88:aa:ef:c1:7a:
                    c0:f2:d7:7b:64:32:ba:75:e3:07:85:4a:17:b7:0b:
                    52:dd:b6:72:80:36:21:3f:b3:ca:90:dc:ed:8e:09:
                    a9:98:50:bb:a8:04:f4:5f:c7:21:48:44:fe:e9:25:
                    e9:34:4a:85:8e:f5:6a:8c:9e:e6:fe:00:85:4a:c4:
                    3f:4b:7c:87:df:46:f4:b1:60:a6:24:c3:82:0c:37:
                    c7:d3:b5:3a:dd:05:34:64:34:b1:90:7d:db:a9:63:
                    9d:0c:52:d6:c9:fd:a0:9d:60:0a:28:46:9c:c7:3a:
                    a5:c3:e2:a7:56:45:e8:09:b9:16:c8:09:c3:a3:5d:
                    71:62:0b:b4:43:46:22:c6:31:8c:b8:c9:86:48:d7:
                    43:6b:16:73:89:fc:3a:09:62:81:5c:59:f5:7b:b5:
                    88:49:e7:e9:b9:5f:ee:ce:9f:94:68:1e:e1:ac:99:
                    40:7f:d8:6b:ce:6b:bc:48:38:a5:a3:99:46:da:c7:
                    cf:ec:bc:a8:fd:17:6a:c9:fc:ca:5c:3b:b9:62:68:
                    18:46:5c:96:1e:53:0a:23:aa:69:f2:78:e7:43:d5:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:34:41:D3:D9:9A:A9:91:DC:DA:9A:EA:4B:B2:DF:EE:FF:70:AB
            X509v3 Authority Key Identifier:
                keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:47:79:b6:db:26:22:a8:6e:31:1b:9d:76:d2:7a:d2:37:
         d6:0f:33:1e:6c:07:68:0a:15:4b:c7:4a:02:54:0f:87:28:f1:
         43:ed:85:1f:d9:5d:c3:12:92:35:43:4b:f2:b3:47:ec:e6:ee:
         ee:92:93:a0:fa:75:6d:62:96:e5:92:cc:9c:8b:b0:f3:79:43:
         f2:01:c1:1b:91:93:88:c6:85:18:6d:fa:87:34:52:e1:39:8b:
         51:e3:b1:6d:e1:78:a6:2a:4a:5d:ed:a1:d5:8b:c2:1b:55:91:
         8a:df:d0:a8:84:6f:86:8a:c4:28:96:fb:a7:d0:ed:5d:4c:c8:
         84:3f:1a:cf:fe:0b:09:e0:e9:fd:91:2d:e1:98:54:d0:fa:20:
         36:e8:73:e3:6e:cf:1c:c2:8f:7d:26:91:ab:05:bd:52:35:49:
         4f:7a:51:91:67:08:a6:1c:c5:98:f7:08:e1:84:d7:a1:64:cc:
         3e:37:9a:0c:09:90:e4:04:80:d6:3d:34:fd:fc:bf:0c:ed:3c:
         ac:93:ff:67:46:39:f4:0e:9d:16:3d:b9:4d:48:46:3a:07:44:
         23:0b:5e:66:6a:81:72:de:96:d9:a8:00:ae:0c:f6:1a:b8:18:
         1b:47:d3:3e:d5:25:98:76:84:fc:3f:a3:07:f1:e9:91:d5:e1:
         96:7a:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----