Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File:                     d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier:          IVQKPdWxuHybj7CstwwOLjSp//Jkz1RGuCptRGS/4eQ=
Subject key identifier:   F0:33:2C:59:8B:AD:F8:31:AF:77:57:FA:A5:A9:BB:75:55:FC:D7:7D
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer:       /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial:       01962E6182D6B828062D8AFDA934111E4CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
                          2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: kHamtcUnrJVSyEOG12SOReMyIQCb0ZKglg1UTwIqhiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:82:d6:b8:28:06:2d:8a:fd:a9:34:11:1e:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=f0332c598badf831af7757faa5a9bb7555fcd77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:ad:81:52:65:9f:f4:ba:ba:bc:42:2f:84:
                    87:7e:85:48:f2:29:b3:6f:9e:d7:fa:88:c7:32:0c:
                    d8:60:58:6d:cf:20:aa:7b:82:2a:57:84:44:2e:16:
                    c6:b6:a3:cf:58:17:a1:c8:6d:fa:20:54:59:c9:93:
                    12:60:c8:04:37:00:e7:3f:22:a0:85:e4:fa:8a:94:
                    4d:eb:e5:c4:41:90:88:37:cc:9c:1d:01:1b:d1:3a:
                    06:33:cc:da:6e:1d:33:70:8d:8c:86:46:cb:af:b6:
                    b7:75:94:48:14:9c:24:6a:fd:6b:c7:61:13:7f:b5:
                    b4:e7:55:35:87:9c:4e:09:47:e4:ce:ab:4f:43:17:
                    2d:20:76:16:74:bf:6b:e7:70:c6:8b:de:4a:34:18:
                    34:66:a9:f5:c6:e9:2f:fd:6f:e5:a0:38:89:b9:af:
                    55:9f:5e:c3:fd:b5:69:68:b9:f2:df:a8:08:60:e8:
                    79:b6:91:e9:2a:81:53:4d:f3:d9:f7:e2:bc:88:aa:
                    70:10:d7:bc:a1:a1:81:58:b2:78:2c:40:53:e6:55:
                    66:79:33:e6:78:92:b3:1e:f6:21:e6:31:95:35:f2:
                    6e:94:df:c6:42:5e:d2:3f:45:b1:e5:9d:e1:b8:2f:
                    ee:c8:86:e5:e7:29:64:d4:2e:05:40:cc:2b:4b:62:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:2C:59:8B:AD:F8:31:AF:77:57:FA:A5:A9:BB:75:55:FC:D7:7D
            X509v3 Authority Key Identifier:
                keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:7d:60:b4:72:94:7b:3e:c1:76:3d:98:f5:4b:ee:10:2b:
         82:11:fc:d6:b2:85:85:d1:9b:2f:e7:b4:f0:59:b8:d3:70:05:
         05:fb:2b:a1:2a:02:ee:67:8c:e4:19:cb:23:84:93:0a:e8:b2:
         6f:2f:aa:ec:c5:94:11:5f:0c:7f:15:9b:1b:c2:24:8a:6e:ea:
         43:90:b9:8d:21:18:49:fe:9f:8a:37:72:3b:19:67:9f:2e:7b:
         0c:8b:8a:07:4f:87:ad:0f:ef:f3:78:1c:86:e6:3c:79:66:8c:
         38:c5:dd:56:ba:a4:ff:8a:af:37:cf:1d:b9:47:6a:d9:03:7e:
         20:e2:ff:b5:14:01:2b:4d:94:60:0f:24:ba:88:3a:69:54:95:
         99:0f:a8:a3:ab:40:4b:f7:e7:4d:dc:33:28:aa:c8:53:d1:7b:
         ff:48:4e:3b:0e:d3:32:8c:81:55:d1:bd:31:15:cf:48:08:90:
         85:5c:06:89:d1:93:a1:50:ad:d8:a1:d7:47:92:be:f1:6c:a9:
         2f:48:34:b4:73:de:91:8b:34:6f:f5:b9:6e:ce:eb:8f:38:58:
         bb:3d:69:a6:7f:cc:3a:da:e3:e2:da:c9:25:08:29:7d:fc:b1:
         80:a4:14:42:70:29:37:1d:09:b5:cb:55:b7:1b:ef:0a:4b:68:
         76:36:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----