Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File:                     d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier:          4fo1OjC25byP6qp159W8o8mDbjmF7YL3foz3/8QgJSg=
Subject key identifier:   1B:E0:21:D7:75:43:BA:36:72:D4:32:A7:C0:DD:A3:9F:C6:76:A2:3F
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer:       /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial:       01962F748642FBDB84512CEE7F21C672B86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
                          2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
                          3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: IQLEdjZA873+I2nsmwbLiCGCup6/QNIVW0JtEMAZIU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:42:fb:db:84:51:2c:ee:7f:21:c6:72:b8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=1be021d77543ba3672d432a7c0dda39fc676a23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:0c:ed:a8:d4:ba:d5:82:b7:16:cd:34:f8:
                    a9:78:93:52:12:ac:f0:ae:55:43:28:87:05:9d:36:
                    b8:12:3f:36:b1:89:aa:37:ed:02:ed:1f:9a:9a:b4:
                    76:24:98:b6:9c:e5:39:09:b6:86:25:93:42:37:25:
                    c4:4d:c0:c1:8d:49:7d:ff:20:c4:58:25:40:14:c6:
                    4a:fd:a4:90:3b:34:0d:2f:06:06:9a:ed:52:67:3d:
                    0a:6e:46:6f:fe:e5:de:12:62:cb:b8:9c:56:87:8e:
                    bc:94:8a:b6:e7:ac:6f:c5:4c:6b:60:42:72:d3:b9:
                    b3:4a:a5:68:e2:3f:e2:a7:55:6d:2b:7a:de:9f:3d:
                    10:9a:ae:33:22:da:52:55:3d:29:26:d5:79:f0:ad:
                    fc:0e:e2:ec:61:09:15:36:d3:ca:db:8f:9d:b3:6e:
                    d1:20:e9:61:35:56:c6:41:b8:5d:30:87:5c:99:48:
                    f5:db:5b:29:6e:50:f0:3b:2c:f8:98:2b:75:3f:d3:
                    49:4c:84:f3:e9:e1:1c:28:83:c2:27:f9:a9:64:86:
                    00:aa:f2:1c:b9:21:fc:c2:22:b3:e6:ae:d2:6c:bb:
                    54:1c:4f:14:9e:80:46:f8:4c:76:db:d1:de:53:21:
                    21:25:7d:a7:a0:a3:17:05:53:31:b1:a1:07:f2:b0:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E0:21:D7:75:43:BA:36:72:D4:32:A7:C0:DD:A3:9F:C6:76:A2:3F
            X509v3 Authority Key Identifier:
                keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:43:a6:6c:f6:85:08:e5:04:ec:83:50:3e:ed:4c:d8:5b:
         bf:fc:b8:7b:2f:25:b2:a2:41:aa:01:eb:e2:b2:2f:e3:8d:51:
         a0:4f:05:dd:58:66:a4:99:c0:42:05:bf:99:60:78:25:8f:bb:
         ca:95:c8:df:c7:2e:60:8f:a2:51:85:eb:34:01:6b:fb:05:0c:
         30:ba:89:7e:77:b1:09:43:8c:2c:7e:23:c9:a7:54:2e:21:e5:
         e4:fb:cf:5b:28:af:f8:d2:57:7f:f9:60:29:23:d4:3c:0c:62:
         ba:c5:3a:c0:54:e8:e0:fc:9e:a5:03:93:ae:02:69:eb:6f:a8:
         80:49:f8:59:66:8e:2f:b0:b1:63:8b:21:c9:57:df:36:cf:d4:
         f3:fc:46:64:83:8b:59:aa:5a:46:93:1e:e9:98:01:9c:1a:0f:
         bc:59:60:40:32:c1:44:ab:63:50:20:0a:1c:cb:27:82:dd:b7:
         1d:8b:12:c5:79:c1:cf:81:28:c9:ef:e1:41:10:f2:35:58:8d:
         03:49:83:6f:b0:c9:c6:19:b6:36:0a:71:d0:f6:86:0b:86:c2:
         eb:25:72:37:f5:bc:4c:9f:f1:c6:36:db:a5:12:14:21:17:5e:
         96:70:91:2a:90:a6:d9:d1:da:c4:79:a4:4a:98:43:46:8c:ed:
         df:b0:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----