Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File:                     D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier:          yoclBIYpab1oQpobt1dcs8IVvTPToP4hBnbOqy5hCEc=
Subject key identifier:   5C:F2:90:DF:0B:8B:F6:A7:A2:E7:18:15:00:C9:EF:C6:5A:3E:45:3B
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer:       /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial:       01962E9889F1C26F42DE215051ED6750EA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: GOkU0dIHYsr3UEfnRF5FK38hTD3TIVTPChg2KiDip+0=)
                          2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:89:f1:c2:6f:42:de:21:50:51:ed:67:50:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=5cf290df0b8bf6a7a2e7181500c9efc65a3e453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:c6:16:8e:07:6a:da:2e:11:eb:e0:77:15:
                    41:c1:d0:8e:c6:36:8e:47:01:6e:4e:dc:4b:d3:24:
                    20:ad:04:13:18:49:40:a5:d3:cd:de:f1:45:ed:df:
                    53:b4:e6:d2:06:5d:cc:30:45:b8:d3:17:58:9d:cb:
                    cf:79:d7:de:9b:7e:d8:c2:04:cc:16:6b:9f:fc:b1:
                    36:33:6b:9d:f6:45:e3:ea:95:0f:61:4c:8b:01:d4:
                    cc:42:a7:92:5c:43:e4:c3:57:39:37:26:b5:d6:ae:
                    45:a6:aa:6c:c7:22:fe:55:1a:44:17:43:1e:e5:0d:
                    b6:56:b9:60:75:87:e4:3f:2d:f0:1c:96:fb:23:e2:
                    ec:a9:35:08:a3:97:57:97:ab:9e:48:6b:63:e3:d3:
                    99:f6:9f:00:07:87:9d:19:01:e3:33:07:c1:b6:f2:
                    82:b4:c4:3a:b1:84:18:4d:43:8b:21:c7:c6:a2:40:
                    a3:cb:33:29:96:71:3f:9b:3a:5e:a5:9b:50:e5:22:
                    ea:f4:ad:06:ae:3a:c9:ab:98:19:22:b5:09:e7:52:
                    26:c0:c4:ec:07:5d:cf:b5:fa:b3:1f:24:ba:08:8a:
                    7f:0d:97:e8:f4:6e:2b:cf:0a:d4:be:7a:3f:8b:b4:
                    bf:83:c4:14:5f:1e:b1:0d:cb:92:69:a2:54:7d:8c:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F2:90:DF:0B:8B:F6:A7:A2:E7:18:15:00:C9:EF:C6:5A:3E:45:3B
            X509v3 Authority Key Identifier:
                keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:69:fc:8e:12:28:05:d1:d3:de:2c:49:82:c2:7d:fc:ab:
         d8:43:ab:9f:af:78:ff:9b:fd:59:2d:2f:24:50:e5:af:f0:c4:
         f6:10:74:58:9a:3c:6c:4e:7b:71:52:82:2a:46:41:3e:c4:80:
         a8:3a:b2:bb:44:0a:50:a6:cc:98:cc:da:34:12:a1:64:ce:d9:
         e1:80:44:7a:2a:e2:17:23:ba:0e:65:6f:4b:24:ca:bf:21:b3:
         9c:de:46:69:de:7c:99:be:79:16:c6:65:66:a0:87:0d:5a:29:
         3f:21:91:80:57:ae:d6:f7:91:85:fc:e4:07:49:b2:10:a8:88:
         2e:74:3d:2d:77:66:39:e9:9e:de:f8:73:14:c4:53:8d:65:a0:
         4c:2d:83:e9:3a:7e:45:63:5c:2e:6f:4e:07:2e:8c:94:7f:73:
         f1:04:d5:16:0c:ca:eb:b9:3d:02:71:a8:07:6c:99:43:ad:d8:
         ae:7a:8f:64:b3:c3:a0:ff:3e:86:6b:95:89:04:c3:a7:8c:ba:
         40:6e:ba:b2:30:83:e2:ac:3a:1b:44:6d:e6:e7:fd:90:3f:6e:
         7e:34:c4:26:a0:23:3b:25:36:be:32:23:4c:ae:1c:c4:83:40:
         e8:59:9c:6d:a4:40:f2:f9:8d:1b:25:9f:e9:5e:f6:62:c5:e4:
         81:64:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----