Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File:                     dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier:          IkDZ+1c76Gukz2k3KAEIRBdDQN7jlBOlreGzKjn8SjI=
Subject key identifier:   EF:5E:2C:03:D7:38:00:3B:69:51:D5:9B:58:2C:BD:04:92:DA:41:39
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer:       /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial:       01962E61C99BBCC4369B431D498F34EDEEEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number:          1184
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: ggg09q1Ij4Fq5f1ouoGva8S5jXpSnNGtdIyYUfqH5ew=)
                          2: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (hash: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c9:9b:bc:c4:36:9b:43:1d:49:8f:34:ed:ee:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=ef5e2c03d738003b6951d59b582cbd0492da4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:6c:87:06:d4:50:67:31:0e:47:0a:18:71:
                    1d:14:ee:c6:7c:b6:c7:1f:ff:68:0d:d2:5c:3c:31:
                    62:81:4a:2d:b6:b8:22:08:3b:49:6a:05:ad:68:e5:
                    e4:a1:b9:44:ab:b1:04:c2:c9:05:48:0f:19:71:55:
                    76:58:2f:81:0e:2d:c4:12:3f:66:a2:2e:f4:98:92:
                    ab:fe:2b:89:0a:a7:4f:f8:1d:2e:7c:a3:93:4f:26:
                    ef:c2:b3:9b:2f:78:fc:5d:ca:39:f5:a5:c8:45:0b:
                    ca:75:54:a2:69:66:a8:ff:3f:64:02:a9:77:74:09:
                    85:a9:83:46:78:2d:2a:40:3c:40:d4:96:e2:2c:8a:
                    12:5a:64:42:5f:dd:c3:16:ae:f8:6a:ea:48:d5:81:
                    45:e5:cf:e5:1a:2b:f0:98:80:cd:eb:0c:1b:9f:01:
                    47:89:69:6d:b8:93:7c:16:6d:f7:0a:5b:ae:92:90:
                    49:a4:bb:2d:28:0a:1f:de:4f:ea:45:87:c8:b0:6f:
                    27:ec:17:15:af:a9:dd:e3:72:da:99:f9:a2:cc:89:
                    6d:98:0b:e0:8e:e4:52:a4:5a:0d:4b:05:f2:c6:b9:
                    22:92:6b:2a:64:08:17:63:e6:e4:4f:b3:28:32:e9:
                    14:51:63:57:a0:4c:8a:49:d5:5d:0f:5f:d9:8a:09:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:2C:03:D7:38:00:3B:69:51:D5:9B:58:2C:BD:04:92:DA:41:39
            X509v3 Authority Key Identifier:
                keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:61:96:02:cf:3f:3a:d6:51:35:d7:3d:50:94:2c:90:23:
         e5:4c:17:bb:d9:b4:b3:1a:95:b6:54:fe:fa:23:0c:53:c9:e5:
         18:9d:04:da:4e:d2:e0:21:b7:d8:78:29:dc:65:1b:c5:b9:8c:
         72:c5:69:6f:50:7d:ea:1e:49:08:7c:34:5c:0c:3d:6e:e4:19:
         8d:16:6d:34:c0:ea:27:3a:98:69:10:8b:9d:92:5b:3f:a0:4d:
         52:37:92:a1:e2:40:dd:20:4b:2f:54:59:4b:d1:87:99:04:1f:
         51:5d:8b:cb:aa:aa:8e:3e:d4:6c:66:9f:cd:82:eb:a4:05:63:
         a4:85:6d:d4:45:6b:eb:93:1f:0b:a4:5c:62:38:7e:21:f8:71:
         c1:1d:c6:ea:7f:f6:31:47:00:4e:a1:75:d8:46:3d:44:92:4d:
         0a:eb:48:5c:01:c3:cc:04:c9:8a:4c:87:d6:51:a2:23:c5:ef:
         9f:c2:69:ad:0b:d2:aa:26:ad:31:29:4d:52:7a:58:15:0e:b7:
         79:db:fe:b0:8a:80:ea:a1:00:42:85:d7:01:ba:8c:01:f7:d8:
         99:3f:b3:fc:f1:82:47:97:64:ac:93:0e:0a:8f:1e:fd:da:16:
         e8:55:26:46:a5:e0:54:1b:0f:19:63:34:9e:7b:80:bc:91:5b:
         ab:3b:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----