Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File:                     rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier:          aE2BZhJYCwY1NlF5blbPSMwC22d70kl1+eoWR5M2G2I=
Subject key identifier:   1B:AB:3A:BD:E8:F3:0B:56:4B:41:BD:A2:B5:26:A4:45:83:DC:F1:2D
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer:       /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial:       01962ECF9FA1E2B04C73E811CD62F98F5E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number:          0D5E
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
                          2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: 2TI05f13u57LqndB/FeYuw23dQRJwuYJxZM9FqSqpm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9f:a1:e2:b0:4c:73:e8:11:cd:62:f9:8f:5e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=1bab3abde8f30b564b41bda2b526a44583dcf12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:12:bb:26:e6:52:25:8e:d3:7b:13:60:fe:
                    20:6d:38:7e:29:c4:f9:0d:bc:de:c5:79:56:7a:e9:
                    e4:9a:6b:1d:bc:f2:cc:9c:25:b1:87:22:e4:c2:b0:
                    95:c4:0d:b1:1a:fe:b2:1d:82:4a:39:b4:2a:3a:9f:
                    2b:38:5f:64:8a:5f:f6:c6:5b:42:20:c3:eb:5d:f2:
                    eb:bd:6e:93:d5:80:1c:6d:71:64:ae:d1:26:b4:c0:
                    02:1f:1f:25:37:73:32:c6:e6:73:45:60:eb:b1:0e:
                    13:34:0b:f6:f1:f8:2f:fe:c0:7d:8c:4e:39:c1:54:
                    a9:fd:22:fb:4e:c4:e6:3f:5c:06:18:15:98:c9:bb:
                    77:b0:dd:83:ab:4d:4c:2b:87:68:96:33:de:3d:2b:
                    5c:dc:f0:9c:4b:0f:ac:45:b2:bf:b4:36:83:e1:3e:
                    b4:07:0c:dd:c7:bb:93:7e:c1:fa:65:79:ca:2b:d0:
                    5b:44:88:70:0b:46:01:56:92:30:2d:ea:35:6a:59:
                    99:a0:71:ff:1c:38:cf:27:8e:7d:55:4b:62:70:7f:
                    92:91:f3:74:53:76:b2:3d:a0:e9:bf:b2:82:dc:30:
                    52:db:ea:70:1d:53:43:b7:65:ff:69:6d:ea:b3:83:
                    3d:ee:73:1a:4f:4b:42:cf:d3:f4:3e:15:a7:e6:3d:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AB:3A:BD:E8:F3:0B:56:4B:41:BD:A2:B5:26:A4:45:83:DC:F1:2D
            X509v3 Authority Key Identifier:
                keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:b6:8c:63:c8:ab:d3:59:e9:b9:78:88:3a:f4:eb:25:54:
         c8:5b:e6:5a:4b:08:a5:12:22:ba:64:11:9c:08:29:d1:eb:ef:
         67:97:cc:71:c9:de:1f:bd:ba:f6:fa:c8:f6:1b:cc:cb:55:d2:
         79:8c:3a:a7:c4:2e:67:4d:30:0d:9f:55:3b:a9:2f:1b:3f:59:
         0d:3c:d6:78:51:4a:07:51:57:56:3e:29:4f:5d:cd:c7:6e:c4:
         ae:ec:9e:40:70:58:fc:b7:38:eb:9f:43:79:52:52:60:1e:1c:
         f2:21:1e:b6:1c:f2:62:1e:15:fc:48:cd:eb:4c:36:98:63:4f:
         c0:e9:b2:03:5d:b8:64:c6:9f:b6:c3:30:5e:97:e6:65:cf:55:
         aa:bd:3d:2f:28:e3:73:10:6c:91:e5:af:a3:eb:ef:e0:0b:df:
         1d:25:1d:64:54:43:47:16:12:cf:ec:2a:e2:4a:10:e5:eb:ce:
         7a:7e:05:16:1c:c0:e1:10:b1:c4:e9:8a:78:85:40:66:45:e0:
         8d:05:22:16:b0:1d:e8:b8:e9:99:fa:20:41:fb:5f:fc:3c:11:
         b6:b5:80:7c:98:a2:1d:31:e9:bd:7e:a6:e3:90:4a:1a:ba:79:
         bf:f7:4b:19:fb:91:e4:a4:f0:e5:22:58:3f:e1:9b:c9:dd:87:
         37:e3:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----