Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File:                     309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier:          mZjHfb8PhzRi4kUtJ6MoiyccUMznLjpouYnxD26mEcY=
Subject key identifier:   47:53:68:E8:27:FD:EA:0C:05:2D:8C:77:1C:4A:1E:95:14:61:A6:95
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer:       /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial:       01962F065BC58718A9317DC797411913F9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number:          92
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: sGJJQ/eK8UQ5UJHqdl9n9vRb44GL7do4FGhFPJe8WIo=)
                          2: m-RbidkNWQkN01GbFCAQaZKCeHY.roa (hash: rUWJNToLZ6TcfaoQcpJt+6y642guAKwp5vd3Wd/8VLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5b:c5:87:18:a9:31:7d:c7:97:41:19:13:f9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=475368e827fdea0c052d8c771c4a1e951461a695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:11:bc:8a:de:42:76:72:43:47:5c:0b:56:
                    f0:83:21:68:a0:f9:02:32:66:88:72:3e:53:dc:d9:
                    44:3e:a0:b5:76:33:b6:9e:fb:c1:2b:66:2b:d0:34:
                    8a:34:b4:3e:79:1f:2e:24:20:55:52:f1:fa:bc:25:
                    75:89:4b:94:b2:fa:2a:1e:30:f0:6f:58:0b:12:2f:
                    fd:fd:16:00:42:2b:c8:3b:9c:67:04:3d:ba:dd:87:
                    20:2d:ca:cc:85:8a:10:d0:35:0c:85:97:b3:a6:4d:
                    62:96:59:f9:ca:f7:1a:9f:da:a1:4f:76:88:71:cc:
                    e6:51:3c:16:5d:a4:88:76:b7:7b:67:a5:66:89:67:
                    be:1f:92:c6:cf:d6:8c:2d:db:11:05:24:27:fe:d2:
                    95:15:a5:40:a8:0c:26:26:81:27:c9:57:2d:79:22:
                    62:db:f1:ad:84:06:b3:a4:c8:f9:2d:8f:c8:61:02:
                    ca:14:49:26:81:03:fa:1e:3d:e9:5c:8e:7c:af:69:
                    9e:1b:d7:b2:b7:34:e5:45:0a:4d:c7:97:8d:f1:84:
                    63:b9:6a:54:71:71:bb:9b:e5:f0:b6:ea:a8:d9:22:
                    67:1c:6b:ec:21:f7:5c:53:27:b6:06:8c:bf:8e:35:
                    a0:a8:79:11:09:94:36:59:89:3d:e0:05:a4:44:c7:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:68:E8:27:FD:EA:0C:05:2D:8C:77:1C:4A:1E:95:14:61:A6:95
            X509v3 Authority Key Identifier:
                keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:49:31:10:05:0d:69:77:58:d0:de:92:ea:d2:76:b4:5d:
         ac:0c:19:26:93:c1:3d:0e:0d:74:f5:40:48:41:6f:f2:b4:ea:
         d5:65:d0:f9:dc:84:7b:2a:c9:54:79:5f:1f:a3:9c:17:db:ae:
         4f:1e:b6:b6:79:91:69:f5:e7:86:c5:b4:7f:8b:11:5a:a6:2e:
         ae:1c:35:3b:72:0c:53:00:3f:25:b6:83:98:0c:99:f1:0a:5c:
         f7:2c:39:9f:c4:31:32:92:6c:91:90:7b:dd:6d:16:25:3f:1a:
         61:48:da:25:e4:3b:6f:ef:7e:6c:f3:5e:f7:34:82:bc:bf:a3:
         06:f3:14:a0:d2:a7:48:9a:6e:6d:f1:c3:df:29:b4:13:18:92:
         7c:ca:1c:d7:56:56:13:75:2f:98:bf:56:63:15:10:59:df:ae:
         99:5d:79:59:39:54:3e:e0:fe:86:85:c6:6e:17:c9:03:28:ed:
         d1:3b:78:60:c5:4f:c6:ee:12:c6:9a:e8:70:75:80:8e:9c:49:
         d1:ca:69:07:d3:17:a3:ea:d8:f0:d9:1c:00:9c:72:be:cb:fb:
         a0:77:84:0c:1b:4b:4c:71:98:6b:10:70:be:2e:01:28:a7:83:
         d7:96:8b:42:45:57:bd:e4:48:de:08:ee:45:ae:cb:08:0a:b5:
         cf:45:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----