Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File:                     0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier:          NJv5U/TSVuRLHbM921G+odGrTUxLsX6Q595xqh+6qnQ=
Subject key identifier:   A9:72:92:1A:63:D2:F5:B7:DA:AA:D4:41:DB:07:6C:4A:E2:5E:21:32
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer:       /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial:       01962F06F604AA0979CBA9B5ADF91BB94E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number:          10A5
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: ISRKDQ5AUx8ZjoQj7GFeH4tfwuDGA1VjPDEn14GYemo=)
                          2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f6:04:aa:09:79:cb:a9:b5:ad:f9:1b:b9:4e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=a972921a63d2f5b7daaad441db076c4ae25e2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:ec:7c:fb:9e:20:27:f7:07:5f:a7:77:56:
                    6a:09:b8:f0:2d:b1:35:d1:00:7b:ce:13:43:52:cb:
                    08:d8:0c:16:a7:b7:50:2d:a6:75:59:01:93:82:97:
                    ba:07:92:d1:1e:74:cb:b5:d6:e3:59:45:cf:87:f5:
                    5d:bb:9e:d7:b7:8d:a6:cb:e1:a5:02:9d:66:0f:58:
                    a7:0a:2c:8a:56:d2:bc:4c:f4:00:5e:68:cc:36:5b:
                    61:76:f3:8b:76:8a:44:f5:69:7b:75:47:d3:e7:85:
                    8b:e3:3f:57:6b:f0:bb:29:27:ba:ed:4a:2b:c3:4a:
                    68:12:50:0c:4a:09:71:bc:c4:b2:96:1b:8c:5c:08:
                    2e:a5:b3:03:f4:14:e8:a1:8f:c1:15:11:d3:c7:80:
                    2e:73:7d:ab:66:e4:9b:a6:06:f3:46:31:41:f9:d5:
                    49:6a:8d:4a:d7:19:3d:da:1a:90:a2:5a:bf:b8:5a:
                    4e:7e:5f:7a:fc:52:ee:4e:88:2a:3c:e8:90:c2:4b:
                    73:7c:6b:cf:a9:5a:29:27:38:8e:42:1c:11:93:58:
                    f1:77:e8:0c:87:f7:41:c6:65:f6:75:66:20:bb:ff:
                    70:23:bc:a8:07:66:1c:f9:c2:98:33:34:3c:6a:24:
                    6c:66:da:5c:46:31:a5:bb:a3:f6:0a:27:1f:a1:94:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:72:92:1A:63:D2:F5:B7:DA:AA:D4:41:DB:07:6C:4A:E2:5E:21:32
            X509v3 Authority Key Identifier:
                keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:22:b6:e6:6a:d3:5b:57:4b:2f:b2:8f:9d:ef:96:2e:b4:
         b6:ba:b6:4f:c0:5d:f2:4e:76:0b:51:21:f8:6e:8e:16:9c:0e:
         cc:d6:5f:6a:6e:8e:95:73:d1:65:76:70:ae:00:f7:fd:24:8f:
         8e:83:f8:d4:05:17:20:3d:01:ce:8d:8f:82:35:eb:92:7c:b0:
         a6:b5:01:ba:6c:8e:68:8b:b7:a8:43:9a:da:89:80:cb:30:49:
         b3:72:af:3b:97:7f:90:4d:eb:14:41:09:f0:7c:5b:7c:da:e0:
         3c:02:e2:79:23:91:5b:1a:49:e7:2b:a0:9f:e0:40:2d:64:c6:
         3f:61:45:f3:09:66:e0:75:84:fb:b6:2f:a5:d1:df:73:99:80:
         3b:ac:4b:35:03:2a:d0:7b:0a:5e:72:22:8e:a5:31:f0:e0:9a:
         9c:80:bc:e7:3a:68:d3:92:64:30:08:cc:20:31:a0:41:5e:30:
         98:b3:d9:a0:af:e3:7a:79:91:b6:63:18:7b:84:4a:ed:41:c2:
         0a:8c:4a:4e:19:dc:37:b3:a7:55:ec:4a:a2:b3:01:a0:24:1c:
         24:61:1b:db:f7:ce:c5:17:9c:97:ff:d7:35:f3:35:d3:6d:5a:
         19:ce:ab:48:58:98:43:5b:b9:63:d9:5e:c8:82:cc:fe:e0:a5:
         44:17:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----