Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          CVp9OaqFlBVxjltrnm0RpWaIpDjNBgl9sW9ksJ2v8Bg=
Subject key identifier:   05:FE:0C:5D:4B:A6:10:29:7E:2A:B0:D9:20:A7:75:1E:E3:1D:F8:BF
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       01962F74B81D96210684266B41D79CC9E48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          01E2
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: qAuUyJrGLMTp7igjlioVquFATiQv31qMsIa/s0olYqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b8:1d:96:21:06:84:26:6b:41:d7:9c:c9:e4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=05fe0c5d4ba610297e2ab0d920a7751ee31df8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:d7:b6:e2:fc:b3:ec:9a:d8:64:6d:3a:ae:
                    91:4f:ae:87:a8:32:02:a8:a9:83:11:23:f7:f1:d2:
                    2f:02:0a:1c:41:50:5d:85:25:92:be:81:67:27:09:
                    92:f2:22:9f:dd:f1:1b:8b:7d:56:19:9e:1d:6b:55:
                    ed:9f:32:67:2d:ca:19:8a:a2:06:7e:e3:eb:3a:bc:
                    2c:03:b9:37:b8:8c:26:a5:dc:94:dd:57:73:59:76:
                    89:3f:50:b9:c2:99:85:39:8e:de:92:72:a5:6a:20:
                    e5:6a:10:3c:2f:8c:d6:93:d6:cc:e9:93:55:de:f1:
                    8b:14:5b:48:93:10:e1:a6:86:09:0b:89:0c:1c:36:
                    e2:ee:16:51:14:14:8a:6c:26:12:3f:4f:68:45:c4:
                    dd:ed:e0:44:3f:54:64:c5:90:bc:5f:f9:4a:f7:49:
                    9d:78:18:18:7d:c3:35:d5:9b:3f:3a:f7:19:0a:1f:
                    92:c4:b9:a0:b1:8b:04:15:7e:cc:3f:3a:89:92:f1:
                    05:ec:c0:3f:bc:79:38:a7:99:39:ae:d3:cb:55:6a:
                    bf:d2:71:d5:94:34:21:ed:6c:09:f8:b4:ed:4f:6b:
                    0c:46:dd:cd:45:da:98:45:e9:e3:20:c7:db:6f:67:
                    36:2c:ad:fe:8d:f5:3e:b2:03:bf:7d:8f:ef:d1:31:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:0C:5D:4B:A6:10:29:7E:2A:B0:D9:20:A7:75:1E:E3:1D:F8:BF
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:b4:cd:8a:db:1d:4d:a3:65:fb:fb:60:b6:9c:b0:16:e6:
         53:57:ce:98:96:6f:f7:d4:44:d4:b0:3c:ad:0a:9e:28:5b:9a:
         31:67:44:1a:ec:8e:03:c0:f3:8e:c8:c5:19:32:c1:d8:35:e8:
         3e:6b:b7:98:a3:35:2d:50:1b:51:44:8a:a1:b2:dd:26:7e:ef:
         22:b2:5a:2f:c8:62:ea:d3:ff:ce:15:bd:fe:f7:3a:0e:64:a9:
         72:22:0a:76:c7:2d:cd:60:9d:21:e3:e9:f6:94:15:5b:cd:ec:
         d8:4a:3b:9c:ab:26:ec:6b:6c:0d:c9:94:04:97:97:e5:15:6c:
         37:b0:62:30:cd:37:29:7d:ae:bb:61:7e:2e:ba:f9:7a:0d:f8:
         4f:63:a5:2b:db:17:ce:44:0e:d1:b4:66:b3:0d:1f:62:18:07:
         31:13:89:d7:ed:dd:df:09:d0:0e:92:78:80:5b:80:1a:29:9b:
         3b:f0:d2:50:b9:43:39:6f:f3:54:ed:3f:06:79:07:75:e2:17:
         7f:fa:67:e4:26:1b:4f:e4:1b:67:98:50:50:bb:48:1c:c5:7d:
         d2:9e:ed:3d:b5:ff:fa:c4:e3:ec:ab:0c:fd:0b:ae:96:73:d1:
         22:ea:e2:3d:eb:25:7a:ed:eb:ff:aa:30:29:62:18:e3:d7:ba:
         08:e8:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----