Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File:                     06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier:          Bhnt77BiUuFFZGGh65dAGrPtCulOOArF21qRfYon7jw=
Subject key identifier:   E9:02:CF:A6:AB:37:43:03:CB:9E:FF:CA:F7:94:4C:A5:6B:78:A9:C1
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer:       /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial:       01962E6215517A71C484257D6F0198C38013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number:          130A
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: 7YiblgVRIBKhdcJigPWvCWhbiZvBrRgFETZc4Y5dg44=)
                          2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
                          3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:15:51:7a:71:c4:84:25:7d:6f:01:98:c3:80:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=e902cfa6ab374303cb9effcaf7944ca56b78a9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:54:9d:5e:db:58:10:06:f1:a1:f5:73:8b:
                    5d:80:be:48:06:ef:97:9c:6f:92:c3:ce:7b:a3:50:
                    f3:a3:7e:6d:61:1e:75:1d:50:c5:eb:85:df:d8:47:
                    ec:7f:75:27:2a:3b:1e:d2:d5:e8:a2:5a:19:35:85:
                    06:e1:16:ac:33:50:ef:2f:93:e4:d2:f7:a4:da:b8:
                    d9:cf:43:64:d6:02:52:7f:f7:a9:07:99:bb:cf:a4:
                    78:90:99:2c:3e:c4:3e:2a:12:b9:8f:2a:2b:ba:e6:
                    4d:a8:d6:a0:41:9a:43:4d:35:58:29:27:f9:29:6c:
                    44:8e:c8:41:03:87:1c:a2:59:41:9b:c1:2b:4b:c1:
                    ec:c8:74:cd:8d:ce:0e:f4:8c:f8:11:a8:f5:90:e7:
                    24:53:2b:c9:29:03:f6:43:c8:5a:72:4c:d1:c4:89:
                    37:bb:df:ec:fe:1b:9c:64:28:e5:b8:c0:ef:2b:75:
                    5d:ac:b2:51:9a:6e:e9:6d:e3:c3:04:d1:68:8e:48:
                    42:4e:e5:f0:f4:ac:8e:9e:b3:0c:18:b4:9a:0c:c0:
                    9e:6c:1a:40:f5:3b:8d:79:24:cd:23:48:b0:12:db:
                    aa:ea:4d:58:45:e4:50:a6:df:ac:57:e3:3e:f8:85:
                    db:78:49:06:93:d9:a7:4e:45:5c:81:cd:5b:81:3a:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:CF:A6:AB:37:43:03:CB:9E:FF:CA:F7:94:4C:A5:6B:78:A9:C1
            X509v3 Authority Key Identifier:
                keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:55:47:56:08:f6:21:4d:90:d7:d9:3b:4b:a2:d3:b1:ef:09:
         79:48:5c:50:2f:da:c4:12:b9:1d:04:ed:56:4c:78:3e:63:68:
         43:65:1a:6d:8c:aa:8a:43:45:e0:b6:75:f5:ea:a4:c2:12:a0:
         11:d2:0e:af:87:b3:d4:45:43:cb:c6:3f:b9:84:8b:98:19:74:
         15:63:49:b7:31:00:d0:10:96:58:91:6f:6c:ae:49:95:02:93:
         be:99:ba:50:76:77:af:7d:a5:83:b9:5f:f4:d6:4b:4b:81:69:
         19:96:05:aa:ab:11:1e:9d:93:14:a2:47:74:01:46:ad:50:94:
         6d:62:30:34:33:58:38:b6:6b:62:22:1f:71:a4:c5:aa:e6:79:
         1e:0b:e8:a3:6b:0d:8e:93:8b:d7:46:ca:fe:82:3f:58:c1:18:
         eb:75:2f:f9:bb:62:4b:d8:47:c1:4c:17:4e:94:46:21:c8:e0:
         02:b5:64:e8:7a:c5:08:b9:55:ea:4f:d8:46:9f:b5:6a:97:fe:
         6c:c2:ee:90:cc:f3:22:f8:40:4d:fb:16:b1:06:eb:b9:aa:6e:
         e5:6e:8b:38:c0:3c:08:ba:42:0a:2e:33:05:dd:a0:8e:cf:bb:
         40:d7:f6:9d:ef:0f:38:3b:31:3f:94:88:a3:ed:aa:01:a1:e8:
         50:ee:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----