Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File:                     dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier:          VR95CRDKLsN5DrwUPBFM1crcqxYGex7ooZGeFJl96hc=
Subject key identifier:   A1:C6:0E:72:72:15:7B:44:A1:7A:3A:A6:4F:E1:87:A8:5B:BD:FC:86
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer:       /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial:       01962DF4370BE939E6DFA312D40EA1271606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
                          2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: lQBOKdiq/Mg9BE5dExX2LryhLkeRouUceGP9a/5Uu0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:37:0b:e9:39:e6:df:a3:12:d4:0e:a1:27:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=a1c60e7272157b44a17a3aa64fe187a85bbdfc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:d5:b1:e9:d2:ad:30:4b:17:68:76:63:ba:
                    04:62:9e:2f:d2:59:9d:f9:a7:5a:c8:7f:68:22:6d:
                    55:c1:ae:8b:c8:c8:01:f8:6c:9c:6c:d5:8b:0a:29:
                    26:a3:ff:ab:64:43:72:e9:69:aa:db:e3:c7:f5:8e:
                    a6:fc:1f:1e:5c:7c:d6:f1:50:75:9c:84:59:29:5e:
                    e6:bc:1a:78:60:2f:d5:76:cd:1c:66:ac:e7:a5:3e:
                    be:5f:9e:93:fd:95:ed:97:b6:3e:d6:01:47:d8:33:
                    dc:d5:06:4d:6b:c1:9b:23:ef:f1:cc:db:12:5d:0a:
                    02:0a:01:d3:07:f4:95:78:5f:2a:b2:7a:16:f4:65:
                    aa:90:78:c2:76:a9:0d:47:d8:29:18:ee:6e:aa:eb:
                    49:8b:cc:03:ee:54:77:c6:d0:01:60:b8:48:fe:b6:
                    70:02:ae:30:f2:43:6c:e2:25:0a:6a:d7:c4:e5:b8:
                    ae:32:7e:af:ec:b8:a1:b1:ff:d0:c9:00:51:70:c5:
                    45:0d:05:fb:45:57:01:58:a9:b3:01:4f:27:97:74:
                    10:ff:ac:5b:26:42:c1:00:6d:3c:03:fe:8a:4e:a7:
                    4f:cc:f9:1a:da:26:9e:10:63:12:e4:cf:07:a1:d9:
                    ee:60:5b:e3:7a:be:cc:80:98:3e:aa:7f:b4:04:f9:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:0E:72:72:15:7B:44:A1:7A:3A:A6:4F:E1:87:A8:5B:BD:FC:86
            X509v3 Authority Key Identifier:
                keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:c3:94:33:0c:7e:a0:3c:08:ca:10:b7:1e:aa:a0:1f:9b:
         cd:4e:f4:c3:e5:26:f1:30:be:46:f1:f3:a3:7f:47:cb:06:79:
         dc:04:47:0b:d0:d0:a0:96:75:b2:11:b6:a9:bc:6c:76:77:8f:
         3d:8d:70:f5:8a:64:8c:00:b9:15:25:d3:1e:77:38:de:a1:3f:
         e2:6d:c9:f7:ef:df:4d:f2:4d:86:7a:8c:6a:f6:ec:0b:b2:ca:
         ef:06:e4:2c:21:a1:82:9c:c4:0f:cb:f6:5a:bd:22:75:83:00:
         1f:cb:11:e2:4d:ba:8b:fd:1e:6b:2c:c9:3e:30:25:85:84:1d:
         a8:65:3c:7e:7a:1f:e6:86:fc:16:d4:f9:5e:ff:90:83:f0:a0:
         63:da:78:7d:b2:c0:73:ed:56:cb:b2:14:c3:c7:55:f9:b9:a3:
         a7:76:4a:49:d6:b4:c0:2e:e8:4f:6f:a1:d4:16:f2:b9:eb:d4:
         0e:c5:16:9a:7b:a5:28:ec:94:fa:58:76:fe:19:6d:04:f4:0f:
         08:2c:0d:82:41:be:3b:54:dd:ca:5a:07:8b:8b:a2:cc:af:f4:
         d7:30:04:4d:80:c2:04:13:4c:55:5e:32:f2:e9:55:1d:73:fb:
         a3:73:ac:eb:45:b3:98:82:bf:c9:83:da:1c:5f:db:36:02:8c:
         50:30:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----