Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File:                     dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier:          DoUCJvRjC/bRT+q+6z4ZLT95DuOuwlC+yJffGgedK1g=
Subject key identifier:   27:59:94:24:CC:2A:DC:F6:42:D8:C2:33:3F:1F:B3:E8:70:64:E5:E5
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer:       /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial:       01962E988780AA09428C7BF53ABD773A29CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number:          12A9
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
                          2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: Bs5uKtGfj4JTla1JevjmJe64lPTwm+cESEsRIP7FZC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:80:aa:09:42:8c:7b:f5:3a:bd:77:3a:29:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=27599424cc2adcf642d8c2333f1fb3e87064e5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:45:6e:90:ea:bc:9b:d6:40:b0:9a:06:c7:e4:
                    d7:e7:6a:01:d9:3c:57:c6:eb:ab:24:66:d2:14:35:
                    24:ed:b4:b7:44:a9:c9:73:18:d8:51:35:eb:16:31:
                    7c:06:10:86:f5:5f:3d:e3:87:c0:54:d8:4c:b0:a6:
                    2c:56:aa:f5:fe:e7:b2:ee:f4:ef:eb:62:11:1a:53:
                    47:c7:2f:49:ec:73:6d:a2:af:98:85:77:40:ef:89:
                    5a:66:4d:8b:be:be:bc:8d:3a:a1:91:e7:b6:dd:a7:
                    6c:4e:b2:bc:65:99:4b:df:a8:91:10:67:28:89:1b:
                    e5:7b:85:1c:82:34:e6:e4:44:74:a4:12:87:9d:c5:
                    90:b1:eb:86:7f:bc:cc:89:55:64:a0:4c:6d:d2:ad:
                    06:1b:03:8a:c2:6c:66:9d:62:12:ae:6a:2f:fc:ae:
                    a6:1a:0e:fa:28:24:23:3e:19:6e:ff:a2:ba:af:dc:
                    ab:d3:e2:33:bb:99:28:16:bb:7c:6d:55:ae:fa:f1:
                    3a:2e:2a:c5:93:f8:09:ea:70:50:cb:56:58:b1:7f:
                    5b:e6:d9:24:c2:87:d6:27:a1:b4:93:f6:e0:f5:11:
                    78:cc:31:bf:b7:6c:75:14:17:2b:45:00:d3:9d:73:
                    54:7a:28:2f:e7:14:4c:99:e4:67:f7:ca:6c:16:83:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:59:94:24:CC:2A:DC:F6:42:D8:C2:33:3F:1F:B3:E8:70:64:E5:E5
            X509v3 Authority Key Identifier:
                keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f0:c8:83:5b:61:48:c5:1d:a2:f2:d6:6f:af:c6:53:63:7b:
         48:bb:e8:19:0c:36:3f:ce:62:ce:73:d5:61:a0:54:2a:fc:47:
         70:2e:71:83:23:ca:c2:64:35:bb:dc:e4:64:91:9a:94:1d:ba:
         18:7d:cb:25:ff:31:07:3e:f1:1b:01:bb:9e:c0:62:54:5a:99:
         9d:2b:91:12:8d:2f:82:f3:7f:e5:38:fc:3b:6f:5f:29:52:ad:
         f7:7e:3b:8f:20:d0:61:5f:3f:a8:11:a6:e6:ea:1e:bc:90:7d:
         7b:3f:48:c9:5d:e5:c6:d6:c6:32:d7:5b:32:46:ce:8d:c0:1f:
         ca:72:5b:bb:8d:55:ed:1c:f4:e1:ef:50:68:d7:b8:ba:d1:ed:
         87:70:44:d3:0b:cf:16:f6:00:39:fd:2d:6b:f7:9c:78:0e:6d:
         d2:19:3b:0e:fd:2e:11:6d:9f:33:2d:e0:69:97:69:e9:d0:b1:
         a5:38:8e:6c:bf:3c:bc:cf:5f:ce:c8:df:89:d4:88:7c:28:71:
         0d:19:af:c0:4e:06:45:ba:a3:9c:ea:ac:27:40:0a:bc:44:a3:
         51:86:71:e4:85:5b:6f:d6:fe:8a:14:c9:73:a9:47:07:09:74:
         3a:34:77:a7:95:3f:a4:16:f0:a9:64:b7:0e:d7:6e:81:05:50:
         3d:b9:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----