Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          PBvQgZyKLh80U55jP5rNTwtDd70ecWlbK9EBY/MBS9Q=
Subject key identifier:   A6:50:27:19:6E:84:AF:0A:98:E3:1E:B7:3C:48:BA:D8:A5:43:74:4F
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       01962ECF5FEAC656093C2DD2FF3CAE91C69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: RUsElXPaWsFo52l9+Yo3hSlh3ecSe4utM7uIJQ/+DRU=)
                          2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5f:ea:c6:56:09:3c:2d:d2:ff:3c:ae:91:c6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=a65027196e84af0a98e31eb73c48bad8a543744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:76:7e:44:95:69:f3:6f:6c:94:74:70:cc:
                    43:c7:dc:fd:31:7d:1b:02:f7:7f:d1:14:4e:a3:3b:
                    a6:13:39:fc:71:59:ce:82:65:42:a7:96:72:2c:36:
                    51:4a:60:b5:82:ff:77:00:8e:65:e8:8c:f5:18:d5:
                    77:70:24:72:b1:c5:0b:c3:68:14:5a:3c:41:1b:ae:
                    5c:02:6e:fb:42:15:6e:c2:81:9d:5a:6e:96:00:1a:
                    38:fb:a3:cc:6a:1b:33:b0:14:fd:d3:52:32:55:10:
                    40:d7:8f:3c:71:b8:ea:fe:10:7e:65:c1:94:1c:36:
                    6d:c2:c8:e0:01:87:ce:fe:63:66:01:5f:7b:67:99:
                    ed:04:af:a7:ee:25:d6:f2:2f:9d:44:e9:66:5b:81:
                    8f:5a:af:69:e1:20:b2:44:0d:0f:fa:46:43:8f:f9:
                    78:d1:ea:0a:8f:aa:92:67:dd:f9:4b:72:9e:7c:b0:
                    8c:03:35:a1:26:18:36:8d:12:12:27:1e:e4:63:e6:
                    fb:a2:59:d9:7b:81:ef:c2:ab:28:62:63:b3:25:9b:
                    20:21:ed:07:a6:7b:d7:91:df:13:e5:91:8a:db:6f:
                    1e:e1:ea:52:ab:14:65:31:c9:d5:46:71:3f:2c:a7:
                    62:72:08:2c:2f:f9:57:f2:37:a8:5f:8a:9a:bf:95:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:27:19:6E:84:AF:0A:98:E3:1E:B7:3C:48:BA:D8:A5:43:74:4F
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:08:08:f6:fb:b5:da:21:bd:d6:4f:a6:42:af:3f:01:23:
         5a:df:a6:cd:1b:cc:c1:e2:64:8c:c7:f3:3b:ee:9d:2c:5a:ad:
         a2:ed:9b:25:de:0c:18:bc:b4:ff:2f:fa:e4:c4:2a:69:35:d5:
         62:b9:49:f4:f3:44:6a:ee:91:d3:ac:3b:e7:b5:3c:37:bc:88:
         90:13:26:59:74:73:b3:44:97:4e:38:f4:d1:e3:f7:df:08:01:
         b0:4d:6d:16:2d:2b:a5:2d:7b:9c:82:11:71:38:db:5c:df:3d:
         2a:27:77:82:d8:9f:de:2a:1b:c1:00:85:9e:58:36:a5:0d:49:
         06:76:eb:6c:16:28:15:0a:19:11:07:30:1e:e1:0b:22:f8:93:
         d4:3d:ad:f6:cb:ce:a5:c5:dd:03:54:e0:7c:57:3d:64:62:73:
         7b:f2:9f:56:41:2c:a9:2b:9a:77:f6:76:4c:91:ae:f4:2f:3e:
         ef:59:a1:df:28:ee:83:f5:b5:73:9f:9f:f0:9f:a0:34:01:59:
         74:be:4c:9d:9c:6a:0a:0a:c5:a0:95:28:7f:0b:c7:84:a0:c2:
         23:54:99:12:de:8a:10:95:7a:7c:c9:db:0f:73:d1:c3:3a:2f:
         3d:39:5c:37:65:59:f1:7c:65:b0:6e:bc:18:2d:d7:21:31:1b:
         77:ad:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----