Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          W+zxlFOlXfAOglFrQNAN9K5vVcg8oXvkoD08Bly8+E4=
Subject key identifier:   C5:43:83:5E:FF:75:11:2D:51:B6:CE:56:D9:82:6F:BD:F8:20:4E:45
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       01962F74899069AC2A685AB81747338197A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0CB3
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: I9ZZr80WKMN58T7uYtWB5dYu+z7kehMupX3b5CbDwBA=)
                          2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:89:90:69:ac:2a:68:5a:b8:17:47:33:81:97:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=c543835eff75112d51b6ce56d9826fbdf8204e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:39:4d:25:6d:57:8c:c3:f0:91:85:3c:2a:
                    5f:70:b3:e5:5e:7c:e9:8f:57:73:18:eb:5a:16:77:
                    16:8e:9d:35:cb:7a:3b:dd:49:c2:53:17:34:a0:d9:
                    10:c4:ba:0a:83:d1:b3:5c:8a:91:a6:e1:55:eb:7c:
                    07:20:13:32:b2:55:af:3a:25:13:77:26:3c:22:7b:
                    b2:e5:32:6c:bb:dd:d4:02:b0:03:9c:a9:8a:f9:0d:
                    7c:7d:98:e9:cc:28:ee:ba:fc:bd:31:e0:e1:ae:d4:
                    6d:74:c0:db:a1:99:a3:b9:00:3b:2c:ba:8b:73:de:
                    b7:8d:e8:de:b5:cd:76:d8:f3:24:b5:82:81:a4:d2:
                    f9:db:02:ee:89:dc:aa:94:c9:b2:0c:31:54:6b:2f:
                    24:73:09:36:ae:12:af:c9:31:ce:7c:8b:e2:4b:95:
                    b7:dc:58:31:f7:2e:e6:6c:47:a1:4d:06:eb:ca:23:
                    50:cb:3a:aa:3f:d0:42:bf:51:19:20:59:c5:d4:b6:
                    85:f5:84:b9:2f:70:43:cf:54:5c:1e:b1:ca:71:1c:
                    88:66:8d:d1:8b:0a:af:1b:32:2c:f6:0f:e2:4d:d5:
                    14:a2:b4:3b:c9:84:07:9d:d5:45:bf:14:42:99:6d:
                    8f:77:ed:09:2f:6f:80:10:fb:05:40:90:1b:87:2f:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:83:5E:FF:75:11:2D:51:B6:CE:56:D9:82:6F:BD:F8:20:4E:45
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:4c:02:cb:46:46:2f:06:d9:80:58:fa:8f:69:dc:f1:c1:
         3d:92:c4:25:81:f9:d4:0b:06:35:91:7d:0c:1e:4a:d9:5c:51:
         2c:80:34:46:9a:fe:22:2f:14:04:55:1b:42:91:e3:7b:f1:26:
         c5:ff:52:8a:e7:fe:31:27:c5:fd:20:3d:9e:30:5c:52:c8:2d:
         0c:f2:46:cf:20:a8:71:4c:56:25:fa:4e:b2:1c:13:7d:af:bf:
         f9:bc:20:87:56:6d:d3:d1:57:cf:92:b8:04:a4:25:c4:65:99:
         c8:0b:0e:f8:5b:48:b5:33:da:42:a5:90:8d:aa:38:49:cc:e3:
         01:71:48:2b:63:5a:4c:41:0e:2d:cd:cd:9e:05:b1:8e:3d:10:
         91:ff:0d:1b:3a:af:d8:ca:0e:d3:77:73:04:58:6d:c9:10:14:
         e7:a6:89:4c:cc:3b:57:33:13:8a:52:c5:69:d5:aa:81:6e:80:
         33:9a:b3:2c:1e:bc:c8:d8:6a:1a:8a:ad:25:a7:46:df:ca:71:
         1e:88:07:54:39:38:9e:10:49:1f:e9:0a:b5:8b:bf:63:b7:ac:
         08:cc:4c:7c:f7:23:4e:6d:0c:4a:46:4c:09:90:a6:5a:ab:61:
         17:ef:3d:7b:a7:a3:56:13:d3:57:db:c8:d5:91:ca:22:96:d2:
         a9:3f:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----