Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
File:                     uT2pHx9TY0JyxZEQh85my602FKM.mft (raw, json)
Hash identifier:          9tG3C0alt5CwivFqo2newP/+sGc/RVTHR0V1P2gXvQ0=
Subject key identifier:   65:BD:CA:73:91:A7:6B:B6:CB:38:8F:F4:C6:F1:B9:28:73:5F:EA:4D
Authority key identifier: B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
Certificate issuer:       /CN=b93da91f1f53634272c5911087ce66cbad3614a3
Certificate serial:       01962E99367CF207C3193B3B8D692D7B86AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
Manifest number:          0688
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 0386LGj4Sidbyca8KneFkNR54TI.roa (hash: jcV5FqK/anJpS83+3AC/ntYQGRcWnZsS3JRi5ZH9EXg=)
                          2: uT2pHx9TY0JyxZEQh85my602FKM.crl (hash: 9MHk5APKt9YP7gTMebA79pmZP6fHquSLmKGuN2uJPTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:7c:f2:07:c3:19:3b:3b:8d:69:2d:7b:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93da91f1f53634272c5911087ce66cbad3614a3
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=65bdca7391a76bb6cb388ff4c6f1b928735fea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:f0:e6:19:d1:4b:65:16:dd:7c:63:b7:2a:
                    e4:40:6a:2a:56:c7:b0:32:ac:8e:bd:c6:6b:01:13:
                    f1:eb:9e:04:af:eb:db:8f:be:50:62:09:f2:ce:ee:
                    7c:68:a1:6e:61:01:57:ca:5f:0d:f5:ff:5a:83:4d:
                    4f:15:ea:2b:e6:af:09:70:9e:7e:e2:0e:77:87:6d:
                    4a:2b:89:56:b9:87:20:ea:d5:84:8a:a2:e6:84:11:
                    3f:de:80:84:97:74:e8:69:50:e6:12:35:5f:4a:95:
                    d7:41:42:aa:0c:00:b0:2e:c0:e9:f6:9e:d6:e2:89:
                    f1:9b:b2:21:17:ee:aa:6b:49:7e:8d:b6:47:f1:e3:
                    a5:a1:8e:8a:75:ff:58:ef:e4:dc:57:e1:66:e9:c6:
                    88:be:d8:2f:9a:7f:5d:d8:4d:bb:b2:46:11:cc:ba:
                    fb:74:b4:b8:5c:f5:21:49:ad:01:1d:38:55:e1:20:
                    6c:7e:76:33:de:4d:b6:d0:38:1d:33:49:62:e0:98:
                    cf:38:20:ec:a9:cc:f1:7a:7a:0b:4c:5b:99:c3:68:
                    81:b1:f4:a6:b6:94:69:c1:54:4b:98:54:d5:9f:6b:
                    3c:1e:df:a1:bd:f4:62:84:d3:71:88:b0:27:4f:b9:
                    27:d6:f8:bd:44:06:e6:d2:50:b9:53:f3:b7:13:9c:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:CA:73:91:A7:6B:B6:CB:38:8F:F4:C6:F1:B9:28:73:5F:EA:4D
            X509v3 Authority Key Identifier:
                keyid:B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ea:e9:36:bf:80:e2:34:66:1d:4c:f8:60:05:82:2e:45:3d:
         78:0f:a3:d8:59:75:6a:b9:f3:51:fd:12:51:d7:72:ef:f6:b5:
         0f:55:de:03:83:1c:a4:f1:25:17:0a:47:a9:aa:a0:49:60:4b:
         f6:d0:51:16:20:6f:9e:2f:13:05:cf:43:12:47:4f:a7:ce:8f:
         a4:eb:7a:9d:2e:60:5f:a4:50:34:98:e6:db:4f:56:13:b0:49:
         7c:33:4c:a0:f6:d8:dc:b9:f3:d5:72:cf:1a:18:58:51:1a:ce:
         1e:bc:2c:68:b4:e9:3e:47:03:8c:92:30:99:7f:d6:4d:28:2c:
         db:4f:7f:1c:e8:41:c0:5b:18:89:51:6a:95:36:94:31:dd:df:
         30:78:d3:5d:da:48:78:b2:a1:ad:30:93:25:06:d9:1a:3c:a7:
         a8:aa:22:2f:ef:90:08:56:86:88:45:e2:ba:b4:df:73:7e:99:
         39:c5:46:77:b2:8f:0e:ac:4e:40:5e:c6:a7:bc:10:56:4d:00:
         b5:8d:d5:40:80:87:c0:60:95:e7:2d:dc:fa:9c:b5:06:65:e1:
         87:52:30:84:4d:c5:a4:53:21:71:e8:c7:74:6f:3f:96:36:a7:
         96:4c:fb:99:82:5d:ce:50:94:14:20:ac:96:ad:69:00:a3:e2:
         67:83:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----