Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File:                     d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier:          f3Z0IlyqqykCU0Nd0K/mwz+WeihALv6EaqNGs/K3Hwk=
Subject key identifier:   EA:C3:59:65:F8:FA:24:36:72:21:0D:0C:2C:6B:0E:21:9C:E3:D6:3E
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer:       /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial:       01962E996641118E8A6A389E0DA42212AC84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number:          0A45
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
                          2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: hLBMj4LW2yy9bG1VteuV31G6pel+B7vsjPzdvEOJaD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:41:11:8e:8a:6a:38:9e:0d:a4:22:12:ac:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=eac35965f8fa243672210d0c2c6b0e219ce3d63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:f4:41:30:f5:76:da:d9:2c:d8:60:bf:be:
                    0d:e2:20:9d:16:fa:70:9f:83:31:75:8c:00:77:19:
                    fa:f4:5a:5f:9d:5d:48:10:10:ae:d9:18:06:d9:37:
                    87:c2:ea:12:01:55:6b:ca:54:45:0e:6c:b5:27:97:
                    44:39:5d:36:67:7d:2a:d0:07:be:25:90:3e:13:8d:
                    fd:e1:60:98:97:28:4b:2a:56:36:c1:04:2d:fe:c9:
                    e6:39:13:fb:3f:e9:46:f0:11:be:c0:7d:ee:5f:11:
                    cd:78:8d:31:a5:1f:9e:c4:d7:e5:07:88:81:0b:fb:
                    51:c0:4e:16:0b:49:7f:ed:f8:2b:b2:34:d8:4b:ac:
                    c6:5f:a6:b2:48:ee:69:82:d6:7f:80:92:44:11:a7:
                    7b:6f:1b:b5:d6:6c:b2:95:fc:f4:d3:4e:1f:6e:4a:
                    ae:ae:5e:cb:36:35:5e:6f:d0:03:ea:31:61:8b:84:
                    8c:f5:5b:f8:47:9e:08:f1:8c:8d:a6:21:be:f2:4d:
                    ca:9e:49:29:3c:55:a9:29:eb:70:a6:9e:c9:b1:22:
                    bd:47:a5:03:85:8e:16:54:56:f4:4a:2f:5f:cf:14:
                    5f:0f:d5:02:f5:2b:4c:25:bc:40:35:88:63:6d:aa:
                    0e:16:69:cf:97:dc:e6:45:e9:7e:14:11:d1:68:fa:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:59:65:F8:FA:24:36:72:21:0D:0C:2C:6B:0E:21:9C:E3:D6:3E
            X509v3 Authority Key Identifier:
                keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2a:1e:af:5d:e6:c7:77:39:20:66:c7:50:9c:3f:ad:a4:91:
         07:fb:da:b3:3d:3b:ec:b6:4f:a3:44:2f:c2:df:9a:a7:0e:ee:
         5f:d1:1f:f5:14:62:d4:ad:40:a8:dd:38:e1:be:eb:68:ee:76:
         7a:0e:35:3f:f6:a3:fc:01:fe:cf:37:78:5a:eb:09:63:37:94:
         37:7c:89:92:d9:88:48:be:1d:b1:f7:ae:99:63:33:b7:b6:75:
         7a:de:88:19:9b:ca:c7:bc:a7:39:51:1e:1c:1d:e9:4a:b5:37:
         fb:bc:35:e6:7e:73:67:8e:4f:21:78:b2:57:4f:b5:10:80:72:
         06:2b:10:85:a8:20:da:85:dd:13:ae:73:32:b4:40:4e:01:50:
         9e:04:26:6f:01:3d:35:16:b4:92:9b:af:25:aa:ef:60:6a:a1:
         38:e1:c9:3e:a0:91:cc:79:65:cd:05:a5:14:cd:37:fa:78:d6:
         6e:b9:a0:25:72:72:0f:e2:52:b2:d0:e1:1f:3c:71:42:da:be:
         9d:3d:81:88:4c:db:a8:ac:24:14:f9:b7:84:19:f5:05:cb:9e:
         c6:81:73:49:28:e2:53:2d:d7:dd:6c:6e:11:44:91:8c:b2:00:
         8c:a2:b1:0c:4c:db:96:1e:2a:98:a7:7f:d2:07:44:d4:2a:35:
         2a:af:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----