Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File:                     2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier:          jhQXU7Njwarywx6p9faRB3E0nKZTo58QvoN1eWprDGY=
Subject key identifier:   63:DA:01:C0:98:4D:1E:36:DF:2A:93:73:32:DB:57:A1:AA:AB:FF:D2
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer:       /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial:       01962E617935C5641308E88A2B2F13AE00E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number:          0977
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: 8y990+bndvAamHJl57WgaTrTqcXYWPsnJIRidZOpbKU=)
                          2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:79:35:c5:64:13:08:e8:8a:2b:2f:13:ae:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=63da01c0984d1e36df2a937332db57a1aaabffd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:0f:4a:66:5d:17:ad:0e:0a:02:20:51:c9:
                    a3:97:5f:3c:61:bc:7c:a2:df:56:e1:7c:b4:c3:f7:
                    0b:c7:ab:68:f0:26:88:d1:61:1d:a3:72:ba:b8:ee:
                    67:34:57:94:a5:a0:ee:01:9c:30:35:2b:26:6c:0a:
                    ee:0f:0d:c4:8f:5e:d0:71:12:61:e3:f0:f5:6e:b8:
                    84:a1:98:cf:b1:c8:75:e9:ad:58:7e:22:d6:c1:6b:
                    14:d6:50:27:6b:40:49:28:17:14:65:66:91:bd:1e:
                    ee:77:d5:e9:b7:3f:9f:db:5e:4b:b2:bd:65:9c:82:
                    5e:96:4d:01:0d:d5:6a:19:34:0f:8b:09:67:2b:eb:
                    5b:7a:fd:87:07:af:82:d5:f6:09:45:fe:d2:d2:58:
                    8e:32:0f:e1:3f:d2:3b:c0:92:d4:a8:13:0e:f6:d3:
                    6d:09:75:13:a5:1d:b5:1e:a5:61:7d:cf:f7:7b:76:
                    13:4c:19:9e:52:59:04:82:1f:88:f4:8b:dd:06:aa:
                    f9:df:79:b0:a3:d4:88:d6:dd:9a:63:57:d9:1b:e5:
                    3b:f5:d5:f0:4b:35:b8:da:90:1c:d9:cc:02:6f:37:
                    f3:41:f0:00:58:bf:92:21:cb:09:8a:a3:fd:88:51:
                    d8:fb:7f:64:7b:63:96:14:f0:fa:f5:58:66:c8:f8:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:01:C0:98:4D:1E:36:DF:2A:93:73:32:DB:57:A1:AA:AB:FF:D2
            X509v3 Authority Key Identifier:
                keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:cf:7f:a9:98:ed:35:9a:c7:73:28:be:a7:52:6c:eb:fc:
         59:89:a4:27:1d:f6:2e:04:f0:93:4f:d6:e2:f5:c5:ba:0a:30:
         b6:56:a2:1b:8d:42:eb:15:4a:cc:35:f7:cd:cc:14:51:13:95:
         b2:52:3d:03:76:18:85:06:fb:15:6a:96:98:fd:ea:eb:91:cd:
         d4:7b:7f:79:87:33:21:36:b2:39:81:a8:7a:06:96:9c:00:ea:
         ba:17:43:6e:e0:9e:0c:8c:62:ca:92:5c:ee:6c:d5:dd:94:cd:
         8c:31:b8:f7:23:ea:ad:6d:ab:3a:74:0e:da:60:3f:62:ac:db:
         57:f5:39:c4:e3:85:31:2e:06:3a:ca:84:3d:2e:8e:34:a6:d9:
         fb:c9:42:3f:88:34:63:14:b1:9e:42:30:35:ea:5f:67:d1:8a:
         4c:2a:2b:d7:bd:33:c4:f9:16:68:00:2f:d5:80:72:55:7f:a6:
         f2:b1:83:37:52:1d:0a:2d:a8:40:11:b6:e3:9c:14:62:7e:db:
         4c:3f:67:a2:24:2d:1c:c1:77:7a:d1:ae:d6:8a:c9:d1:b0:48:
         a3:12:98:01:ae:69:ca:01:9c:7a:7b:1d:51:71:1b:cb:1d:ec:
         d3:85:21:2e:a6:56:45:c7:2b:d8:93:82:3b:b6:bc:f1:10:4d:
         eb:21:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----