Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File:                     m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier:          dakUfET+mbwxxUNwPiWd5ngQuVR5JIji+TfQXVzjuww=
Subject key identifier:   2D:08:2C:BC:6D:2E:A6:5E:88:DF:71:A5:73:0E:9F:8C:83:A9:53:7F
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer:       /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial:       01962F744617D6DE9EA820765DBA1A098F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
                          2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: yb37sVA+Dt6+sjw74HY698dq5DDI1rAvPRvY2ycV44s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:46:17:d6:de:9e:a8:20:76:5d:ba:1a:09:8f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=2d082cbc6d2ea65e88df71a5730e9f8c83a9537f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:c3:8e:03:84:b3:e2:7f:e2:87:44:94:b0:
                    14:11:c9:53:e1:fb:b4:26:85:0d:8f:53:10:2c:48:
                    89:50:76:c7:91:57:3a:d5:4b:69:ee:79:51:80:e0:
                    25:e1:09:84:b7:4e:fb:21:55:25:f4:5a:0b:d0:4d:
                    82:1b:d0:f1:45:8f:b6:f0:28:f5:6f:ee:65:f6:8c:
                    23:4b:09:e3:ea:fd:21:45:9a:bd:ad:8f:15:ef:f9:
                    e0:bc:e5:d8:38:8d:19:e0:44:21:38:74:1e:35:28:
                    70:57:32:f8:82:e2:dd:fd:84:84:27:b5:47:f9:93:
                    5b:45:f6:29:97:26:9b:cb:5d:42:46:ad:bb:67:8e:
                    ef:7d:b2:4f:23:e7:48:c1:e5:0e:30:89:7a:c4:e8:
                    ec:e5:79:46:bc:cb:93:a5:99:75:fa:b2:9b:b1:c0:
                    23:51:28:32:7b:75:3f:60:b0:a9:e2:10:32:8f:69:
                    cf:f8:0a:4d:fd:a0:a9:20:d4:99:dc:2b:59:44:9e:
                    de:04:76:27:0f:40:06:40:5e:80:c5:c4:3e:5e:da:
                    cd:41:88:e3:2f:41:bb:05:77:4a:47:34:86:a5:a0:
                    25:41:c7:49:82:80:36:00:ba:d4:16:a9:35:46:ae:
                    80:65:e9:d6:ef:90:54:1c:9c:b1:4c:5f:f2:c7:19:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:2C:BC:6D:2E:A6:5E:88:DF:71:A5:73:0E:9F:8C:83:A9:53:7F
            X509v3 Authority Key Identifier:
                keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:45:bf:b2:46:72:1b:7d:74:f3:ae:d7:cf:a3:56:c8:dc:c0:
         d1:8b:60:63:c2:f4:7c:07:70:eb:16:2a:29:42:c2:74:8a:14:
         57:f1:be:6b:15:be:fc:25:e9:7a:17:96:9c:23:26:c2:64:ba:
         85:f1:b9:fd:1a:4e:d8:00:d7:be:3e:f0:85:24:95:fd:be:2b:
         19:76:4b:f0:02:54:70:b9:5c:ec:de:d0:18:d7:c9:e9:2b:7f:
         5f:30:a7:d8:02:02:3d:30:c0:f0:42:e3:0c:6e:8e:b4:d1:09:
         c4:77:6b:ff:50:f9:b1:66:d3:2e:c5:79:4a:57:29:2c:94:24:
         b0:fb:7d:dc:8e:95:58:af:ae:5c:5e:ac:94:23:92:98:b5:ff:
         ae:20:1c:27:c8:f3:a7:48:1d:21:4f:6f:44:39:4b:87:67:df:
         44:9c:61:93:78:bf:2f:e7:46:5c:1a:f0:1f:f6:76:9b:6b:3f:
         09:f6:f3:1d:77:07:81:e9:51:de:d9:da:eb:50:4c:cf:ba:ec:
         26:16:61:ca:c4:af:f4:af:bf:9d:dd:51:55:21:39:63:21:32:
         52:9e:48:8e:a5:d8:e6:8d:87:8a:1b:0d:aa:4c:48:03:bb:f2:
         99:8c:3e:09:8e:d6:f9:e3:b7:5c:a5:74:95:e9:c9:6f:a7:a1:
         9b:ce:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----