Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File:                     R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier:          NldAoRTSRLyIR9NjJIKr1DNb65clViXI0lNUWV6yAeU=
Subject key identifier:   E0:CC:E6:90:9F:60:E5:52:4D:FE:FC:FA:80:2A:70:89:C5:00:70:35
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer:       /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial:       01962E61EE071157E28FC1BCBBE5B8008284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number:          076A
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
                          2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: cU1w9T28Z/BcqLnH3cK+EYmfIZCJ8OxS3gsF5wZRU0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ee:07:11:57:e2:8f:c1:bc:bb:e5:b8:00:82:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=e0cce6909f60e5524dfefcfa802a7089c5007035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4c:08:f7:12:a0:84:d0:23:d0:ed:b3:73:ae:
                    6b:05:0b:46:89:c6:d8:b0:10:2e:62:de:39:33:46:
                    39:f4:c8:ea:f0:df:bd:10:81:50:81:37:7e:ce:45:
                    e8:6c:bb:fc:f5:56:31:90:8c:a2:8a:42:a0:41:3e:
                    25:0d:03:0f:76:8d:24:2c:14:2a:ea:07:2e:39:8a:
                    7f:98:73:fa:9d:d2:ad:cf:08:82:a0:af:9a:e5:0b:
                    7c:4f:6e:f2:45:aa:db:65:7a:61:d7:4c:5e:48:35:
                    5b:38:26:3a:b0:14:ae:64:fb:77:62:89:60:cd:5f:
                    43:22:4d:ce:4b:b7:08:b7:5b:3d:86:3a:61:51:77:
                    26:ed:c2:a7:37:93:74:6a:7b:eb:03:5c:05:23:25:
                    2e:07:49:23:2c:ab:a2:c2:97:ca:06:2b:1d:d2:89:
                    a1:bd:73:20:03:1e:d1:db:d3:8e:49:1d:d4:94:84:
                    be:8a:1e:d8:03:ff:64:7c:26:a8:6c:c9:f7:c4:c2:
                    3e:53:d7:87:2b:bb:fc:46:d5:d7:19:b3:1f:cd:52:
                    58:10:0b:89:ed:7d:2d:9d:44:af:69:fb:36:57:c7:
                    12:db:75:b0:8b:1b:00:29:fb:58:71:bb:55:5b:59:
                    7c:70:43:13:ee:c5:71:19:ed:c4:6a:8f:ce:50:e7:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:E6:90:9F:60:E5:52:4D:FE:FC:FA:80:2A:70:89:C5:00:70:35
            X509v3 Authority Key Identifier:
                keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:95:51:d6:fe:14:7d:01:b0:93:c7:ab:e8:eb:24:0b:ca:
         eb:74:ea:28:7c:17:c1:84:f3:57:a2:75:97:dd:47:00:e4:47:
         3c:e4:ba:46:93:fd:70:84:44:d2:b4:f7:a0:41:58:66:9f:04:
         27:1e:d5:8b:09:15:26:ec:8d:33:fd:ee:17:74:f9:32:24:b9:
         d9:13:64:ee:f8:81:fa:df:46:bc:c5:9f:6c:38:d5:92:5c:b3:
         dd:a5:81:a3:b0:85:1c:1d:b8:a3:17:4e:14:82:ff:52:15:52:
         a5:74:47:45:3c:2d:10:00:0f:26:fe:60:2c:10:26:d9:e6:86:
         af:ba:f4:c4:bd:5b:b5:66:53:b3:27:4e:be:18:b1:c5:2e:f0:
         04:96:b2:d7:3a:7a:60:b9:a7:10:3b:28:84:39:e3:dd:67:ef:
         d7:33:09:53:ed:45:cc:28:14:fd:d2:fb:06:f3:e6:1c:42:ed:
         52:c3:41:c7:fc:6a:fe:92:89:8c:37:c0:7a:65:4d:b5:1f:be:
         1e:7d:26:67:f4:fb:b2:0e:d2:12:10:9f:db:07:2a:78:81:3e:
         45:59:95:0b:21:6e:73:a5:8b:b1:49:d0:a0:6d:04:91:35:51:
         60:d0:6d:2f:8d:fa:35:41:35:ff:7a:61:a5:aa:c3:f9:34:ed:
         03:66:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----