Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File:                     dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier:          0H47mIpzkBm3s3U97UqJVmtFSATPBEzGuYMpO/P6CBw=
Subject key identifier:   57:48:12:90:80:77:0D:49:45:CF:4D:56:0E:43:77:98:9B:AB:8F:C9
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer:       /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial:       01962F3DBADFB09B183ED2E03C5F62C4C7B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number:          6E
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=)
                          2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: +UHw4cD71wvnOSzBCGHAuNMc8A7EaxYmH/eq0eJclS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ba:df:b0:9b:18:3e:d2:e0:3c:5f:62:c4:c7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=5748129080770d4945cf4d560e4377989bab8fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:0f:9c:f4:e9:71:0d:53:c5:05:cf:01:c5:
                    aa:70:d9:d3:2a:5d:57:66:19:ec:13:b8:0c:57:0d:
                    36:ef:12:05:d1:d2:4d:25:e3:30:1c:22:40:e3:42:
                    cc:8b:0f:6f:a8:a0:e2:e3:30:3b:1b:51:dd:eb:1a:
                    f8:7f:c4:ba:8d:b3:e6:5b:68:13:7d:97:b8:45:83:
                    72:13:d5:2e:9f:95:11:39:d8:ab:74:2e:3a:25:76:
                    7d:3b:95:1c:cd:29:85:74:35:f3:22:f0:e9:bb:b3:
                    f9:83:ae:76:b1:c5:15:6d:76:1b:56:10:36:a1:b1:
                    19:c2:b8:05:22:9b:26:e5:d7:3b:07:4c:37:f5:15:
                    1e:48:b8:2f:6a:16:41:e9:e0:0c:62:bc:d3:ba:ef:
                    1a:87:73:76:3f:18:98:74:95:bf:68:b3:d9:05:75:
                    bb:65:60:65:e9:d1:31:ab:3e:bf:92:86:24:83:37:
                    21:17:00:5d:fd:a7:ff:7e:07:9b:45:87:c8:02:ea:
                    3b:22:e8:1b:6d:83:c9:a9:83:d4:25:3c:d8:8f:00:
                    d7:1a:05:ac:c4:0f:00:a3:30:42:24:ca:25:ff:9f:
                    89:bd:9a:ff:6d:ed:b6:39:dd:ca:e0:40:61:10:f0:
                    1b:b8:48:c5:e9:04:56:f5:67:b0:9c:b4:19:1a:05:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:12:90:80:77:0D:49:45:CF:4D:56:0E:43:77:98:9B:AB:8F:C9
            X509v3 Authority Key Identifier:
                keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:38:39:42:d6:17:c3:37:46:ea:7c:ed:f2:04:db:fc:2b:
         60:a0:47:e7:4e:1b:91:48:79:7f:28:66:f6:83:c1:1c:1f:3e:
         1b:c2:2b:fa:8e:84:c9:2c:3a:8f:38:25:c2:13:84:3c:4a:f0:
         77:81:28:cb:94:b1:2a:96:f3:8e:21:d7:e7:e8:38:88:ab:10:
         d7:72:d8:5a:bd:49:75:a8:c7:68:17:77:0e:c7:b7:a4:82:ed:
         6f:15:c6:78:66:fa:75:b5:99:34:44:60:83:84:ec:7d:7a:40:
         9b:73:33:0b:0b:a2:8f:75:57:35:0b:4e:45:bf:ec:3d:4f:e7:
         ca:a7:f0:ae:7b:1d:89:46:2f:d0:a5:c7:47:1a:97:3e:42:bf:
         db:d0:17:74:3a:f5:9c:2e:3c:d1:6f:2d:86:bc:79:8c:45:99:
         bc:52:3d:9c:9c:b9:aa:1c:b8:76:2f:e6:c8:6d:e0:62:42:8a:
         71:43:56:65:39:df:ef:1d:35:bc:2a:b7:f3:45:24:eb:f8:88:
         cb:e9:13:9f:75:f8:f1:44:e3:17:22:be:c9:88:be:cd:48:e1:
         d1:2e:3d:75:a7:d7:c2:60:54:88:9e:80:d4:d1:80:2e:1d:0f:
         29:59:82:0c:32:63:40:52:32:50:c3:ee:4d:0a:d7:53:e6:38:
         e5:85:8c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----