Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File:                     dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier:          yG/Qv/PUS861kLltqzTcfcXJFcPy+Zid+yifYWKfjqQ=
Subject key identifier:   FD:A6:20:53:68:01:70:5C:26:44:8C:57:1A:46:8A:75:A5:55:0B:44
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer:       /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial:       01962E9985C2282A87AFD0528B0B0147F7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number:          0D9F
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
                          2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: km3r6FpjGLDq5cIPyUuQv3aDBE89UCfrksig4eUzx7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:85:c2:28:2a:87:af:d0:52:8b:0b:01:47:f7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=fda620536801705c26448c571a468a75a5550b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:ae:38:5e:b3:86:1f:6f:a0:5f:27:e0:df:
                    c6:d8:ae:fb:ec:86:36:60:56:dc:1c:f0:2b:cf:5e:
                    42:fa:95:13:47:45:de:cb:e3:fe:8b:24:c1:fa:ec:
                    2d:a0:4e:9b:19:7e:cd:d1:8b:1c:af:8c:d6:c1:1f:
                    88:e2:b9:21:c8:b5:30:d4:39:d1:13:f6:5c:23:7b:
                    84:2d:41:31:fc:be:94:7f:eb:17:7a:99:44:04:44:
                    a7:32:05:bd:37:c5:5b:bc:35:91:81:2c:c4:b2:9d:
                    18:a9:32:d6:a5:26:c0:fc:51:06:76:c8:bb:ee:62:
                    4e:57:9f:82:75:1e:7c:c7:97:1c:5b:43:2a:f4:31:
                    53:c0:4d:84:0e:dc:af:3d:3e:1a:65:74:8f:78:78:
                    2a:a5:e2:95:ae:f6:c6:e4:a0:b0:fa:d5:66:d4:03:
                    08:91:46:02:8f:7b:11:66:2a:5f:b3:95:6a:4a:dc:
                    a7:99:eb:c5:3e:45:15:74:d7:9f:40:26:ad:d1:08:
                    1a:64:71:72:eb:d2:bb:3d:a1:70:a5:9a:95:11:54:
                    ea:7b:cc:71:63:32:e3:9e:29:fa:26:09:74:91:ad:
                    7a:b9:d7:59:05:df:5b:eb:6f:7c:8f:a6:e3:a7:98:
                    88:97:fe:9c:61:a9:94:48:5c:a9:3d:d6:5b:dd:8b:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:20:53:68:01:70:5C:26:44:8C:57:1A:46:8A:75:A5:55:0B:44
            X509v3 Authority Key Identifier:
                keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:dd:41:c9:a8:e2:7f:bc:54:f5:77:f0:ca:98:73:d7:82:48:
         b2:39:28:a6:8f:be:38:e8:1c:ec:54:9e:2a:2b:86:a4:6f:ca:
         6d:75:fb:c4:89:bf:15:59:a5:95:e9:28:a7:66:8f:b4:11:02:
         b3:30:09:f1:e3:b3:70:7b:60:39:2f:32:87:10:5d:8c:45:9a:
         b3:ab:58:8e:7a:d2:2e:af:9d:77:ab:32:ba:6a:d6:08:0a:18:
         7f:d7:8f:d6:54:dd:1a:0c:f2:6c:f7:9b:96:0e:a3:5e:0f:8c:
         61:ce:d2:5f:df:0d:8b:b8:a4:65:2b:d2:7b:26:73:d4:cb:8f:
         40:48:7d:a1:3e:95:dd:9e:99:5b:fd:68:69:71:b0:bf:fe:93:
         93:53:b3:8f:ae:7e:3b:8a:da:bf:ea:7a:a0:82:d2:92:da:aa:
         84:48:5a:09:cd:fc:92:f1:a0:35:cb:99:9d:b1:e5:f4:d9:72:
         90:70:8c:5b:74:84:30:8a:18:3c:36:c3:b8:eb:f2:be:80:9e:
         1d:64:7d:d7:8c:28:9b:d7:71:25:a0:3f:13:3b:8c:f5:b4:00:
         81:8f:bf:32:63:4d:73:de:01:d1:f4:30:6d:a6:1d:39:0b:06:
         bd:cf:17:ed:62:de:bb:80:c7:75:a4:37:af:7c:7f:21:fd:37:
         d9:9d:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----