Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File:                     dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier:          vUVgoKjuxAnMwzUIdRgvbPDMFaRGv1pFNJlYP8jbqiY=
Subject key identifier:   E0:89:A2:FA:6F:06:63:3A:29:2C:7B:7D:80:F6:EB:A2:99:E1:9E:1C
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer:       /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial:       01962E61870CFE2630EEE38D19692EE352D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number:          1467
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
                          2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: rcnWz/yrt5eZEfJqXku/VkPpgkJqPgXxKd2Dd3DUmns=)
                          3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:0c:fe:26:30:ee:e3:8d:19:69:2e:e3:52:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=e089a2fa6f06633a292c7b7d80f6eba299e19e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:20:3c:ef:41:23:84:22:c9:13:09:30:c2:
                    3d:8a:78:2b:41:89:8c:f4:59:de:34:59:93:e4:1c:
                    e4:2f:39:9b:34:1c:f7:51:3e:15:ac:e2:72:63:5d:
                    16:a0:29:5c:02:79:57:9f:a7:79:7a:0f:f7:60:b7:
                    1d:02:8f:6e:d5:3d:ce:e2:55:3d:ed:bf:dd:84:c4:
                    9e:c2:dd:27:cf:64:a5:0a:25:a4:eb:e0:dc:81:7e:
                    cb:20:b8:6a:4d:d5:c6:3f:38:c9:29:3b:bd:d6:ca:
                    18:e4:8f:a9:93:04:9e:ba:60:0a:98:7b:b1:9d:b4:
                    b3:ee:85:66:30:15:72:2f:04:b9:5f:71:66:ce:f7:
                    84:42:15:36:7e:e1:a2:de:b0:1b:94:d9:fd:fe:dd:
                    29:17:d6:55:ef:a4:01:ea:2f:01:44:5c:65:82:51:
                    10:04:e6:0a:2b:2c:17:b8:14:86:6c:9f:8b:a1:1e:
                    29:14:a9:d9:af:ba:4c:a7:cb:2b:71:cd:4a:8f:f0:
                    08:eb:8b:31:d3:74:a2:f6:c8:4c:8c:e2:6e:ce:09:
                    e3:44:14:cd:11:00:13:2b:b7:4b:dd:37:a0:4a:41:
                    b7:83:89:33:77:a9:1e:61:a3:ed:80:8f:5b:62:2e:
                    c7:eb:5e:48:fe:81:d6:2c:fa:45:a7:e0:f2:eb:ad:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:89:A2:FA:6F:06:63:3A:29:2C:7B:7D:80:F6:EB:A2:99:E1:9E:1C
            X509v3 Authority Key Identifier:
                keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:ca:89:4a:64:e1:f9:2f:c1:97:c4:b7:8d:ba:ef:eb:e0:
         2b:d2:83:fd:d0:1b:83:67:6c:e9:89:21:d2:80:3f:e0:cb:ec:
         1b:3f:02:44:28:a5:d3:a6:3a:43:74:95:cc:0f:bc:cf:4c:59:
         78:5b:dd:81:26:79:38:e6:6a:42:cc:d8:e5:d4:e6:73:76:9e:
         09:31:27:55:c5:df:11:d9:47:e1:35:d5:c3:8e:ab:bf:f3:92:
         48:84:eb:16:5c:1a:3a:d2:78:62:ce:44:18:8b:24:f7:26:49:
         44:81:3c:86:c2:a0:0e:81:8b:12:9c:b3:1d:2e:91:48:83:42:
         75:18:76:92:e0:16:cb:a7:6f:e9:61:f5:99:17:11:b9:04:10:
         cc:fe:80:53:41:49:d3:e0:ab:2c:ec:c5:a2:cd:8a:62:d7:12:
         5f:af:d5:32:4f:0a:5f:cb:f8:1d:ce:1b:e1:20:d5:95:0b:b6:
         ea:a3:b6:df:85:1d:a7:b9:57:f1:f3:a8:c2:bb:1e:07:ff:23:
         78:2b:ef:95:d9:b7:71:84:20:4b:b6:15:5a:4a:03:fe:7f:bf:
         4f:e3:66:cf:55:bb:e5:4f:f0:4d:2f:ff:47:82:c6:5d:6d:b6:
         66:48:15:8d:62:fb:a7:27:d4:27:4a:c5:4d:31:2c:a9:24:19:
         26:1d:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----