Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File:                     1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier:          kzzUuEHr4hzFGMoESOuSTVrvlpDZqfNkZfCLgHdkXHM=
Subject key identifier:   A6:2A:C1:85:71:3C:0A:3C:5B:8A:82:4A:8D:89:50:B4:5A:9F:8F:59
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer:       /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial:       01962ECF6940D7B3BEA04CDCC57169C8B914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number:          09F3
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: LtQP8VcPv6ElmOEvutyhAh5tkp8UrQJStJLr90xlYis=)
                          2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:69:40:d7:b3:be:a0:4c:dc:c5:71:69:c8:b9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=a62ac185713c0a3c5b8a824a8d8950b45a9f8f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:01:d9:fa:a3:75:0c:1b:5f:d0:48:ad:a9:
                    f7:31:2d:50:ec:11:f2:4b:50:72:51:83:d8:68:9b:
                    1d:99:b1:ef:90:a6:23:16:fc:cf:1b:a3:ef:42:c6:
                    f3:8a:38:37:e9:0b:9e:f2:b2:b2:ff:d8:86:83:7b:
                    9c:3e:e9:21:7f:af:fb:2c:3f:98:7a:de:78:19:26:
                    f7:93:5d:cc:45:75:8c:ef:ff:37:8f:a4:fc:4e:09:
                    5b:6a:bf:50:51:3d:74:35:1d:94:e7:fa:2f:91:da:
                    03:59:2a:61:42:df:e6:b4:d5:8a:39:88:e4:ac:a4:
                    99:57:9d:9c:ba:8b:46:e7:41:ba:19:ba:b6:c7:49:
                    95:fd:0d:30:03:9a:dc:fc:cf:e9:18:81:50:c8:3f:
                    29:5e:a1:c1:2e:c8:5b:3b:61:7f:f3:ae:19:55:6a:
                    52:6e:a0:21:91:29:e0:9f:23:06:b0:59:74:f6:94:
                    25:86:1c:03:ac:04:44:06:12:de:17:8c:f6:ce:c0:
                    a9:09:32:73:97:74:7e:8a:67:58:d2:53:1e:22:b4:
                    a1:71:fc:c7:ea:25:a8:de:8c:04:5a:f6:d1:47:ea:
                    b0:b4:d8:34:c3:81:7d:5b:30:dc:19:38:0e:e9:06:
                    5e:b8:df:39:47:1f:a3:86:a4:4e:e1:08:90:d6:a2:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:C1:85:71:3C:0A:3C:5B:8A:82:4A:8D:89:50:B4:5A:9F:8F:59
            X509v3 Authority Key Identifier:
                keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:f6:f8:05:ec:85:46:69:e6:bd:6e:0b:2a:d7:51:31:c0:
         40:dd:00:c6:23:e1:a1:a6:73:85:95:49:53:a2:98:f1:80:b7:
         71:11:84:a6:de:ac:72:16:f3:8a:99:da:0a:b4:c2:03:ae:87:
         82:af:ed:65:3b:e0:a2:c8:43:06:fa:92:1f:ba:a0:e5:38:f1:
         e1:26:59:77:7f:fc:fe:02:0a:52:9a:3d:2b:ea:15:75:ed:57:
         09:aa:dd:d4:22:a7:fa:2f:f4:0e:9c:61:99:4a:ab:4b:d4:9c:
         32:6f:2d:66:f2:eb:c4:1c:0f:6c:8b:7c:27:0a:85:74:89:16:
         67:1e:ad:f2:f6:46:84:61:5b:55:2a:21:6e:55:c1:c1:19:89:
         de:76:a6:3c:a5:a0:17:bb:8b:5f:ff:ca:37:18:df:c3:a0:4a:
         b7:26:78:ff:f4:bb:d6:56:fa:96:ad:be:af:ff:e9:7b:24:70:
         99:ab:0a:ce:a9:ea:d2:59:ce:c6:27:b4:4b:cf:6a:19:ff:18:
         5d:28:80:32:39:65:80:15:07:e1:f7:77:fd:d6:8b:4f:a9:04:
         e1:9e:90:75:67:bd:76:4f:7c:fc:8d:c9:c6:89:d8:1f:59:0a:
         c2:25:63:59:ea:2b:cf:e8:44:a5:56:e9:33:aa:e7:a7:7e:56:
         7c:8a:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----