Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File:                     druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier:          Gtdn6tAXJSTojrMbaT/k16+EmFnAqicIIEeCXSupWWE=
Subject key identifier:   1F:90:AF:66:A5:70:A5:9A:3E:3D:BD:B3:81:71:57:F1:CE:08:78:DF
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer:       /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial:       01962ECF7464EB01CB170645DF49B9526E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number:          0EF9
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
                          2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: NUfm1ODvydEIrw1lHJ6Am4chzx7HgZtFLkPpa5m0mTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:64:eb:01:cb:17:06:45:df:49:b9:52:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=1f90af66a570a59a3e3dbdb3817157f1ce0878df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:71:ce:be:67:cb:28:60:80:f2:ee:6a:34:
                    f8:42:5e:a8:0b:43:85:d5:0f:c3:26:00:10:c7:06:
                    e3:27:4e:5f:33:26:92:09:1c:75:11:7d:9d:60:81:
                    62:c1:c1:7d:65:52:d7:44:bc:e9:dc:64:95:9e:b0:
                    1d:c9:21:c4:ae:c5:c1:2c:13:bb:85:10:b3:71:e5:
                    59:2a:3f:a0:5e:3d:90:c8:ac:51:c0:65:6f:17:41:
                    58:dd:c2:49:a2:00:9d:1e:c9:60:00:0e:8e:d6:b4:
                    1a:fe:de:46:4a:94:9a:c0:de:8d:c5:1d:9f:57:5c:
                    99:1a:7f:c8:d6:84:61:dd:88:3a:15:6e:9b:57:6d:
                    f4:03:41:73:24:ce:4d:e3:e1:b0:79:09:74:38:c4:
                    4f:66:9d:8a:d8:3b:96:73:b2:94:70:4f:c6:28:03:
                    0a:9d:d7:6f:ed:08:f4:d1:75:be:ad:7c:28:ed:52:
                    36:dd:e8:7a:0c:ee:09:42:e3:fe:1c:b7:ae:c4:3b:
                    1a:96:50:c9:6f:1f:04:f5:69:aa:09:25:0c:10:ce:
                    3c:74:e0:53:f0:39:af:3b:68:8f:2d:12:91:08:4c:
                    f8:f7:56:21:9c:b3:48:a4:f4:74:4b:32:d9:6f:48:
                    d2:57:d6:cd:e7:94:44:73:74:01:19:05:fb:64:fc:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:AF:66:A5:70:A5:9A:3E:3D:BD:B3:81:71:57:F1:CE:08:78:DF
            X509v3 Authority Key Identifier:
                keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:a8:c9:33:df:79:21:78:60:68:86:44:0b:fd:75:15:e7:
         c7:ba:90:d4:f4:da:41:1b:81:76:90:b3:03:f0:3d:d5:f2:0a:
         e1:cb:bd:d3:ef:6d:9d:aa:2b:23:d1:b0:bb:71:86:ce:ce:c7:
         04:f3:18:f8:bb:fd:0b:67:65:12:8b:2f:9e:9a:fc:83:fa:d0:
         8a:07:21:9e:06:c9:f5:f4:fd:94:e0:36:b5:ed:8a:d7:ff:0d:
         4e:a6:55:f0:2b:f0:9b:ca:64:d8:9c:16:73:c8:53:f3:24:a9:
         16:ea:19:f9:1e:32:61:de:da:b3:7d:9d:2b:38:ac:b7:be:6d:
         0f:99:d5:dd:b9:76:5e:69:ab:cb:1f:18:17:94:50:93:1e:6e:
         3a:d7:30:a6:61:e3:78:70:10:c6:8e:3d:f4:76:38:37:0d:cd:
         9e:2e:71:51:60:85:9f:b5:c3:02:79:d2:db:66:e9:cf:93:48:
         ff:86:d7:88:67:66:bc:24:dd:69:f4:52:b9:55:91:d4:4b:c4:
         69:7f:fc:55:7f:36:4a:b4:f1:64:11:45:57:ab:a7:7e:e6:f8:
         f0:93:30:8e:ed:e3:83:b9:fa:f7:41:ff:56:c8:79:89:86:33:
         d0:a8:89:44:b8:1a:55:88:49:8d:1c:0f:da:4a:ed:20:e1:13:
         d4:2d:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----