Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File:                     0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier:          x0Z0gIfIwTu+zuIh88SXEjHxkClD0baKJ1ZVuEp6I50=
Subject key identifier:   57:1D:B9:06:77:2A:70:66:A8:4B:F5:1A:FE:AE:8C:68:74:16:8E:A2
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer:       /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial:       01962F063FBE8FFE146042487D266CACD301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number:          139E
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: CYkuHCAT3UCAtTzNr6KQWu5Ct//uqHsi5v8vOnH83hk=)
                          2: 24F3NWEaUDo-ywzWotAmlAOE0aY.roa (hash: ERf1+Eo8kcPOcjF9iXtlxaEqblrqJRaC4jpu9Wj4DSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:be:8f:fe:14:60:42:48:7d:26:6c:ac:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=571db906772a7066a84bf51afeae8c6874168ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:75:49:f6:b1:14:8f:34:a8:1d:db:50:19:
                    2d:73:2c:d5:b1:47:6c:b8:18:d3:0c:03:26:f7:16:
                    43:81:0d:e2:bd:15:4d:18:c1:a1:a0:a1:9b:7d:9b:
                    93:75:dc:ec:ef:0a:7a:2b:26:33:59:56:d1:08:af:
                    0c:df:45:b5:40:70:86:c9:49:0a:3f:3a:c0:76:6a:
                    48:47:01:6a:7c:45:f0:2d:2d:f1:54:d8:cd:69:a3:
                    76:f9:01:9f:ee:7a:ea:c7:ed:5f:57:0b:51:e8:f8:
                    ca:4c:80:11:86:4f:d0:e6:50:fd:c4:3e:81:50:e3:
                    fd:b5:94:5e:97:21:08:64:9d:6a:bd:4b:21:44:bd:
                    60:b7:94:05:84:26:42:ce:68:38:c8:fb:5b:ee:8c:
                    34:55:05:1e:67:40:70:b0:9c:ed:b1:67:40:e3:f6:
                    04:8f:5b:1a:09:54:91:bd:e1:45:a8:6c:ac:8a:3d:
                    ee:4e:25:66:80:a0:21:68:b8:02:ea:2b:7f:e5:55:
                    5a:48:6e:d6:73:b8:0b:56:63:1c:82:fb:c9:02:9e:
                    36:4c:84:9f:94:49:9d:20:bb:6f:df:d1:fb:4a:5e:
                    f0:5f:e6:80:7d:15:f5:66:aa:65:c8:e8:af:1d:76:
                    f1:64:11:1d:5e:12:e6:17:84:aa:e7:35:2e:6d:93:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1D:B9:06:77:2A:70:66:A8:4B:F5:1A:FE:AE:8C:68:74:16:8E:A2
            X509v3 Authority Key Identifier:
                keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:d0:7d:03:59:b7:be:8a:f3:ab:0a:99:d2:f9:a9:93:90:
         5d:32:fc:42:68:84:b5:67:0a:7c:80:0c:69:13:63:06:65:72:
         f3:6e:15:ac:52:a2:7d:e9:7d:c5:ae:a7:6d:99:12:9e:08:f6:
         49:5d:fd:dd:8a:da:b2:97:96:a5:c0:4f:94:22:d0:cc:85:1e:
         79:6a:07:0e:f2:d5:0e:ad:81:02:e5:a6:e1:cf:fa:8e:bb:25:
         27:04:38:78:a6:fe:e0:93:92:05:8f:87:09:ab:79:68:3f:24:
         fd:2d:c3:88:9c:16:1b:d6:82:17:82:bb:c6:b7:6f:f9:ea:01:
         6a:47:db:e3:83:8c:d8:dd:55:f8:a0:b0:6e:61:ef:04:cf:dc:
         83:1f:2a:bb:2a:b2:64:15:a4:c9:d0:45:0d:59:3a:06:35:18:
         ce:24:5c:07:26:75:b9:17:e4:5f:05:5c:94:67:49:81:5f:50:
         ec:7e:57:c5:73:32:58:cd:be:9b:d7:91:51:13:3e:59:d1:f0:
         8a:c4:a7:d2:6c:b5:bd:40:63:73:24:8e:2e:f7:b1:e4:09:82:
         4a:27:fc:0b:bd:7d:ed:56:1b:e6:0b:91:66:4e:d9:59:9e:37:
         6a:94:82:a7:eb:b0:51:2b:45:0b:90:eb:2d:bb:1b:33:3b:74:
         08:6e:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----