Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File:                     0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier:          IprMDao9mKcRcqKCtSW4Za6m4ZT9jJ9vwpU6IHoQeIo=
Subject key identifier:   0E:2D:E4:29:B2:D2:91:B1:40:C4:58:7C:05:07:D0:B7:05:2B:09:FE
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer:       /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial:       01962DF43D71FD4F7DAC1E854651486BAAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number:          06FB
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: 3Mx27d/Z65+628HUDjVZDFPnDkutaroe1ATtjuckfFg=)
                          2: DqE8gRgoYoMtwrum6k0T5AcgbA0.roa (hash: 7aUKY9kAGmruCwUgSEXbHojzDkwM52NN/3MTuZeZTP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:71:fd:4f:7d:ac:1e:85:46:51:48:6b:aa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=0e2de429b2d291b140c4587c0507d0b7052b09fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:55:7d:d0:50:0a:4a:78:e7:de:96:72:3f:
                    a6:3f:71:8e:19:62:93:41:8b:85:c7:5e:51:f7:ac:
                    52:70:e1:c4:53:ea:dd:33:d2:8c:34:a5:39:4e:18:
                    b7:76:bf:39:60:8a:b6:6f:0e:10:11:ee:35:b9:4c:
                    59:94:25:f1:a8:c4:d7:f6:0c:5e:f0:49:1c:83:19:
                    36:90:d3:cd:b6:af:8c:f9:74:96:00:6b:3f:1d:5b:
                    0e:ce:b1:08:1b:a8:45:33:5e:0d:99:af:71:32:ce:
                    3a:b0:93:a0:3d:84:bc:0d:c3:53:8f:8d:54:54:6a:
                    b2:71:58:7f:a4:48:f8:61:34:b0:39:ec:0c:25:77:
                    fc:c1:3f:69:d7:dc:7a:d1:43:54:7f:47:f6:d8:f3:
                    3f:34:b7:35:7e:bc:c2:90:82:ab:36:96:3e:be:9c:
                    9b:00:be:a1:f8:da:c1:b6:27:32:10:3f:7d:2b:50:
                    c3:fe:c2:6a:64:3c:ee:28:f8:75:28:52:52:81:90:
                    d1:aa:4c:d9:6c:56:c6:61:54:2d:9f:87:cc:c2:6c:
                    c4:17:d5:d3:5a:d6:07:87:21:2a:23:9e:cc:c0:05:
                    93:55:69:5a:e2:ae:71:10:4f:5f:46:84:0c:37:ff:
                    33:4c:1f:87:05:d5:c1:0f:54:e3:a8:2f:ce:03:76:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:E4:29:B2:D2:91:B1:40:C4:58:7C:05:07:D0:B7:05:2B:09:FE
            X509v3 Authority Key Identifier:
                keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:74:e3:07:12:5d:3d:f9:a9:d8:17:9a:eb:67:47:3f:1f:
         2f:f1:7a:a6:fd:e1:97:e1:bc:24:a8:f8:81:2b:87:17:fb:ef:
         87:5b:8e:84:d6:b8:d0:0a:f4:29:52:e2:52:04:ad:a1:da:a5:
         95:59:fc:df:ad:bb:bc:55:da:c9:3d:69:0f:68:41:98:55:a9:
         7f:62:00:c1:9a:20:09:4a:ca:0d:e1:82:24:98:c2:1a:95:bc:
         8d:cb:e7:04:67:0b:e6:de:f3:be:e5:d5:1a:75:46:22:d8:f2:
         2b:d5:49:aa:f8:7a:72:e2:3e:cf:36:1d:0b:1f:94:61:14:65:
         87:69:e8:ab:63:de:75:46:88:de:80:9f:be:be:ea:c6:87:90:
         20:2b:77:2e:a8:44:a8:69:cb:ee:67:72:da:25:0d:6d:24:3c:
         5b:e7:bb:c4:34:d0:0c:62:1a:e1:84:4e:83:8a:41:a3:2f:11:
         60:c8:7a:2e:ec:77:09:c8:c0:15:2f:6c:1a:c6:d7:51:4b:c6:
         3f:50:8e:48:58:99:da:d6:b7:3e:b0:2d:ba:de:a2:ee:13:7f:
         67:5f:09:c2:26:d7:19:21:12:f5:36:fc:a4:6c:58:4d:ca:5a:
         84:40:f6:2c:c7:32:f5:79:22:2b:72:52:0b:37:d8:42:d0:bc:
         9b:f2:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----