Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File:                     V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier:          q9q3/6IROT8pJ58xRCxx6sM1B0LtEgX92O6BEMwQDbc=
Subject key identifier:   FF:BB:49:2C:8D:AC:D0:85:DB:19:B8:5F:68:42:CF:3B:F1:AC:03:87
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer:       /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial:       01962F3DCA1DAA5238328B6BB8B110F78E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number:          0D45
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: tbWRwosuBf0CmSPCV/E1S7pZYs+bfD1eUg6dLGKPT28=)
                          2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:1d:aa:52:38:32:8b:6b:b8:b1:10:f7:8e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=ffbb492c8dacd085db19b85f6842cf3bf1ac0387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:b7:02:82:79:7f:05:20:74:e8:00:5c:04:
                    ae:3a:76:4d:4e:3f:83:6b:d1:6c:91:27:51:7e:76:
                    71:9b:79:8d:b1:72:25:c4:dc:68:ed:5d:0c:17:14:
                    a6:b6:a8:36:d7:db:fa:f8:54:4a:99:27:2d:f1:a3:
                    6a:04:71:5a:a2:81:53:de:6d:3f:6a:de:5b:ce:25:
                    30:40:4c:50:44:ea:f2:8a:b6:f2:24:e6:5b:63:4c:
                    ad:a4:c2:5c:f6:32:2a:29:88:c4:be:af:69:33:5b:
                    80:95:c3:f7:16:86:7a:27:0a:8c:8e:20:61:7b:27:
                    f1:54:f7:68:c0:88:f7:9e:09:98:6f:2b:3e:9e:6b:
                    33:d6:9f:32:8f:d9:94:25:1d:3f:32:53:6a:44:01:
                    b6:c5:17:e6:8b:e8:49:ba:8e:91:3a:be:e2:f8:26:
                    c5:13:16:9c:60:f9:71:43:07:d2:5a:cb:8d:a7:fd:
                    72:b6:5d:f2:56:cd:20:10:36:fb:26:1a:66:b2:53:
                    b3:55:84:a7:4e:0b:2d:8b:be:87:9b:b9:61:57:c6:
                    d4:89:76:0f:c0:0e:69:52:a4:3e:9a:0a:ee:54:26:
                    88:87:5d:d4:5b:2b:87:80:94:db:0f:f2:f5:11:61:
                    c7:ab:3d:fc:01:94:db:c0:9c:d4:05:72:62:59:65:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BB:49:2C:8D:AC:D0:85:DB:19:B8:5F:68:42:CF:3B:F1:AC:03:87
            X509v3 Authority Key Identifier:
                keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9c:f5:36:ba:01:75:2d:7f:d6:9e:06:5e:11:82:42:3b:85:
         c6:dd:b5:a9:dc:d1:cc:2b:e6:74:ed:41:19:fe:20:f9:5b:57:
         84:9a:64:71:97:a1:04:3f:d8:8b:f9:de:a2:e1:8d:88:50:e5:
         da:34:f7:8c:b5:dc:9d:eb:eb:77:cd:2e:df:8d:d3:aa:70:82:
         ac:31:34:3e:a2:b3:a7:61:b5:5c:d0:ab:bc:0d:c6:f1:35:4b:
         d0:77:6b:32:54:ae:1b:48:99:d6:eb:a9:be:0d:4b:44:50:7e:
         a6:3e:4c:5b:ff:4e:a5:cd:97:fc:5f:40:cf:ea:0b:df:a8:ea:
         f1:25:b5:36:11:3d:38:d7:e0:fb:9a:c2:28:b0:61:9c:71:ee:
         05:7d:37:51:71:4d:b3:79:26:ec:52:d0:2d:b8:c8:a1:45:6d:
         ed:64:c0:a0:19:4e:69:86:cd:eb:c0:9b:cc:09:93:e9:5d:55:
         90:33:2c:5e:2c:c6:3e:46:fa:3d:3e:2c:5e:16:24:20:ba:72:
         2d:8a:74:66:79:10:90:24:07:9e:39:c8:8f:df:45:d1:c8:4b:
         e1:92:c4:c9:52:b8:1d:27:85:84:41:67:8d:2a:e1:43:4b:88:
         67:98:eb:44:56:15:70:35:89:45:35:bf:da:7e:88:f2:68:58:
         ec:ed:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----