Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File:                     D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier:          NurLphPrzd2605E4964wj2kIURHypyXNJn3xt5BZvQc=
Subject key identifier:   6C:A8:C9:AC:55:CB:AF:14:F7:B7:63:44:AE:9F:18:CF:13:95:D8:AE
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer:       /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial:       01962F74A2DAFF71511E7543C13457584F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number:          12C8
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 5_kOrk9oP3_8LpHa04lopaDNoOs.roa (hash: taYYwA5WRT4de9qoNl6GeZp2wx5lTLgYK1KxyY9IZPk=)
                          2: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: L8YT4tdMllhF4JvTSE5EzAeiP87+0WJ3zr2VqCF0wMQ=)
                          3: _MZl5mAk0VStSl6-Iutzl1XZEmc.roa (hash: GAxNehsNlSM4VBui+WLkl0ufFvlsHnC2diPLD2P3m8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:da:ff:71:51:1e:75:43:c1:34:57:58:4f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=6ca8c9ac55cbaf14f7b76344ae9f18cf1395d8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:3c:bd:4e:ee:c1:0d:c9:6a:30:49:24:16:
                    0c:60:95:2e:1c:e2:07:8f:5e:4a:19:3f:4c:f2:70:
                    51:4d:41:bb:e8:bf:0a:d1:a9:bb:32:d0:7c:02:37:
                    00:d6:61:39:c5:00:5a:fc:b4:ef:d7:9a:e8:9e:16:
                    a7:f2:b2:1c:cb:bb:eb:2f:f3:a1:35:c5:3e:7c:db:
                    bc:c4:e2:4e:20:1b:e3:e4:8d:4f:d5:d6:c1:4b:fe:
                    bf:91:31:c5:87:2f:a1:1e:60:bb:3a:aa:fa:ab:ea:
                    39:9d:99:15:2b:dd:99:01:ff:6b:be:64:e7:00:50:
                    0a:9b:a6:a0:2f:d1:68:41:2a:bf:f1:0c:10:7d:f9:
                    09:a7:84:08:cc:0c:22:33:1d:79:fb:84:b7:96:53:
                    8a:75:88:93:48:bf:31:f1:50:80:4f:49:e0:19:10:
                    22:72:4e:9d:92:a6:bc:ca:c3:a5:eb:68:b8:95:80:
                    b9:41:5f:ee:53:78:ed:fe:88:65:31:f0:51:91:36:
                    de:62:1c:8d:16:d5:e6:ea:47:1d:61:f5:f4:bb:4d:
                    71:1f:9f:b9:31:e2:a7:9a:be:6f:1e:f6:1e:74:c1:
                    bb:36:bd:0d:9f:86:a2:e7:f5:c0:88:c3:1c:26:8e:
                    7f:8f:6c:cd:73:13:86:a5:0d:fc:53:81:a7:af:d5:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A8:C9:AC:55:CB:AF:14:F7:B7:63:44:AE:9F:18:CF:13:95:D8:AE
            X509v3 Authority Key Identifier:
                keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:e0:e3:18:0b:26:fb:66:f2:b6:c4:42:d6:34:f3:d5:2d:
         dc:c7:3b:22:b0:20:e0:c2:79:2a:13:dd:ce:74:e3:8d:fc:bb:
         47:bd:bf:5a:cb:1c:22:9d:20:e3:49:1d:85:d9:7b:46:33:38:
         03:2a:b3:70:3a:54:3a:d5:68:b6:38:78:e5:db:b8:9c:0f:ff:
         63:85:a8:1f:f1:72:d6:fd:73:5d:22:ce:0c:c2:38:ba:c6:ba:
         a3:e8:39:e7:ab:51:af:17:8b:d2:55:7e:ee:ec:b9:a2:13:a0:
         79:6b:96:3d:27:76:f0:01:ea:e7:fd:d7:b5:28:d0:6c:6a:76:
         7f:98:fb:ec:9b:8c:2e:68:2f:c0:98:fc:6e:00:6f:ae:9e:e9:
         f2:dd:55:be:65:86:82:6b:8d:a7:8d:d1:53:01:68:d6:a7:0b:
         db:d7:7d:a9:63:c1:fc:7b:77:92:db:08:89:c3:65:ac:b2:8a:
         ad:dc:e5:dc:e4:4c:74:70:57:ce:e8:8c:3e:25:92:5d:66:8e:
         e3:13:15:b8:a5:2b:28:7f:c6:cd:68:71:28:9e:ae:37:fa:f6:
         05:98:13:8c:84:c1:cc:63:d4:9f:6e:1c:85:15:e8:29:d3:e9:
         e3:57:04:9f:58:ae:f6:c1:80:c8:2f:fe:93:06:66:fb:f4:dd:
         38:63:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----