Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          b007N8EY2aBHnxzbA8ugW4gMgCDzptkXnMH59Gv/YJg=
Subject key identifier:   D2:30:F1:81:74:67:AC:89:0A:8B:1A:B0:D4:82:38:53:EA:79:49:76
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       01962F07128EE60D0CC742473F9CC74AFCEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          059E
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: 3hUzmfiKXY3MGndGki02Q7UMwhHCvAQXKb7KSuMlMiE=)
                          2: W26ZqjqHqJjDL39ur5MOByNqIds.roa (hash: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:8e:e6:0d:0c:c7:42:47:3f:9c:c7:4a:fc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=d230f1817467ac890a8b1ab0d4823853ea794976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:b3:6f:87:b5:bd:15:9e:b9:af:8c:3a:d2:
                    cb:ec:d0:93:a1:5e:3c:52:3a:23:b6:7c:10:4b:0c:
                    7e:fb:18:24:f2:4f:2f:72:98:43:63:ef:30:7b:1a:
                    ce:59:9a:70:ab:21:58:0a:1e:01:b2:eb:22:ed:6e:
                    06:b5:4e:f0:09:05:1e:7d:14:57:2c:7d:d1:44:17:
                    f1:2a:4e:77:3b:12:2e:46:ec:fe:32:ef:f7:70:e3:
                    0c:c0:69:4e:86:58:50:37:2e:0a:4e:ca:02:15:0d:
                    00:5c:04:41:e7:86:60:68:d7:9f:87:94:0c:ee:b3:
                    ff:81:42:f9:11:0d:84:ba:c5:0a:20:17:27:87:6c:
                    a9:d1:f8:6f:96:83:95:94:07:e5:ba:a3:f2:ce:16:
                    f0:b3:32:3c:1d:29:15:7e:f6:ed:b9:de:2d:4c:28:
                    4d:d0:b0:11:88:00:48:cb:cf:bd:79:a8:a3:16:e8:
                    35:f5:69:8a:fe:f4:1e:ca:be:7d:b9:c1:e2:cd:6f:
                    06:45:16:59:18:3e:70:17:64:99:3a:25:11:2d:d2:
                    da:e6:6e:bb:69:3f:e8:c1:f6:a3:06:5e:f0:c0:50:
                    e5:de:26:e4:3d:f8:b7:4a:53:30:1b:6a:15:a6:a9:
                    15:8a:d7:44:8b:0b:53:dc:91:24:60:35:9c:8c:35:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:F1:81:74:67:AC:89:0A:8B:1A:B0:D4:82:38:53:EA:79:49:76
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:62:d2:8e:b1:0e:36:4b:75:71:c7:71:04:0e:01:1a:b4:
         46:3c:24:42:50:be:51:60:91:b9:06:fb:ca:ec:63:85:60:c9:
         b5:86:6a:27:61:21:4b:b2:54:28:ac:b0:3d:c0:5e:b5:fa:0a:
         35:c7:b1:56:79:ec:7d:0c:5f:4d:04:24:a6:49:79:a1:81:f0:
         63:55:e5:98:b9:44:72:1e:98:4a:5f:2b:f1:b1:b8:61:da:6a:
         60:a4:f7:e7:fe:ce:a3:82:09:b1:af:e9:fc:29:a4:51:b9:46:
         b9:d0:27:66:ba:17:e1:c3:df:e8:d2:22:8d:e6:cc:88:71:f8:
         1d:03:e6:c2:21:e1:24:03:42:cf:29:92:d8:a0:ed:10:95:cc:
         7c:2e:1c:20:58:1c:28:95:30:09:ae:85:bb:df:86:6a:e9:8a:
         f7:5e:16:39:9b:2f:c1:ae:8e:c7:43:70:a3:7e:10:ba:c9:e2:
         d9:af:32:c8:c7:f3:ba:03:b1:a1:78:fd:79:65:f9:11:f3:13:
         27:75:19:6e:66:fb:a5:4e:91:71:e0:d5:98:0f:09:d0:04:cf:
         c7:69:ff:10:eb:75:54:4e:f0:b9:b4:9a:68:dc:87:1c:41:30:
         4f:b2:c0:6b:40:85:31:03:51:15:35:68:6c:a0:fa:ab:f1:4c:
         60:8d:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----