Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File:                     dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier:          tCR5M9UgJKpHoqkPlY+48szY6J3qBupH6/zhA3CyvwU=
Subject key identifier:   02:CB:EE:63:38:0B:30:C9:26:01:60:71:BE:02:6D:CD:9B:1A:B6:2E
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer:       /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial:       01962E98792CF2071837600D8A3AC8459CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number:          05AB
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: 1jHfCiPd9cyFgXKSGo9SMW0zFDB8ZzieeLv2XJLwFmM=)
                          2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:2c:f2:07:18:37:60:0d:8a:3a:c8:45:9c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=02cbee63380b30c926016071be026dcd9b1ab62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:81:bb:2a:0e:3e:77:dd:54:ee:6e:a0:7a:
                    5f:46:5b:ce:e8:6c:63:18:9e:67:b3:24:99:45:76:
                    f9:23:69:dc:2b:ed:4e:01:41:b1:b7:4f:af:1b:43:
                    9c:91:f9:28:ec:ea:03:ed:00:db:b0:31:b7:c0:4b:
                    18:04:1b:3e:78:ce:7a:30:8e:75:23:65:10:cb:1c:
                    82:a2:6e:69:ef:39:4c:b3:b7:40:b7:d0:d0:39:1f:
                    2b:85:f4:08:74:7b:59:41:44:31:8a:55:43:14:65:
                    cc:e7:b3:09:aa:11:c9:3f:12:f1:60:09:57:11:0b:
                    05:ae:36:02:a5:3d:cc:af:cf:54:b9:25:f9:cb:ea:
                    e1:f4:34:e2:be:48:70:72:71:30:d6:b6:de:88:dc:
                    02:ff:b5:9b:5b:16:e1:42:da:4f:f6:cb:43:68:32:
                    ae:68:bf:51:8d:05:93:45:f2:19:94:51:fa:6e:6b:
                    a0:b5:6e:7a:66:01:a2:bf:65:1c:73:26:31:f2:af:
                    4b:9f:9e:1f:17:14:b4:e1:eb:4d:bf:b8:cc:e6:b7:
                    80:ab:ed:63:7d:d5:e2:92:9e:fa:c9:36:33:bc:4b:
                    44:ed:37:70:6a:48:63:4b:58:bc:d0:78:00:92:aa:
                    f1:f9:d1:5d:ec:60:07:d2:55:c0:43:9e:69:b8:47:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:EE:63:38:0B:30:C9:26:01:60:71:BE:02:6D:CD:9B:1A:B6:2E
            X509v3 Authority Key Identifier:
                keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:46:a5:68:06:3c:e4:fa:c5:4d:f2:57:77:55:1c:f5:f6:
         c1:93:76:3c:de:6d:54:00:d6:21:59:0a:52:b6:6d:c1:46:b9:
         cc:76:11:f8:06:83:2d:d4:f4:bb:d2:ce:c7:36:63:c3:06:de:
         3b:fd:57:02:3a:bc:64:59:a2:03:35:d5:b1:cc:0d:61:10:db:
         3a:35:7a:8d:38:39:d2:b2:99:b9:23:bd:a8:69:bd:e8:cd:28:
         73:a3:ee:c3:47:99:8c:77:3c:1f:23:b5:7c:ef:d4:73:7c:00:
         42:aa:43:20:c5:00:80:99:fe:96:dc:42:54:1e:eb:08:61:48:
         ba:a2:0e:ab:9c:d3:0d:f2:1f:51:b8:7c:7a:10:9d:3e:fd:b9:
         25:b9:dd:8a:bd:65:a5:99:86:9c:04:6a:64:cd:1f:6e:db:88:
         cf:e2:eb:ac:10:20:ec:5f:15:43:29:09:fd:28:ee:f0:5d:4d:
         84:77:ad:58:f7:8a:f9:b8:59:03:40:4f:c9:41:ac:49:1b:a9:
         d8:6d:0e:d0:f5:cb:b7:92:34:e8:7e:b2:a9:38:a7:fc:34:6f:
         ba:7f:a6:cd:2a:be:bf:e5:ba:c6:50:16:b3:c0:c7:fd:a7:dc:
         d5:3b:f7:13:1e:96:3f:f6:aa:58:a9:77:57:cb:0e:ce:6f:7d:
         94:3a:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----