Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
File:                     0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json)
Hash identifier:          xMSp2feLIjBOFKhHFe9jVUA289TvsXJX4V+sEg9jMRI=
Subject key identifier:   A8:C7:06:2F:33:55:D8:6F:F3:1E:03:C9:38:CD:5E:B4:C3:D3:1C:0F
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Certificate issuer:       /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial:       01962F06478BA6A16530D816B80D01DF5D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: mUia6XH0g4zaM7r6jxQ0lMwql0uMOdJZV4qenacX/Xo=)
                          2: On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa (hash: 9kDdHzwM7pfMm0bFoQEb02mFtUGZEAgcsF0RvK2rnzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:47:8b:a6:a1:65:30:d8:16:b8:0d:01:df:5d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=a8c7062f3355d86ff31e03c938cd5eb4c3d31c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:b0:bd:80:3f:c1:1d:69:58:70:06:af:54:
                    ac:b8:89:82:4e:ef:ea:a2:6f:c6:e3:8b:b0:80:dc:
                    0f:64:5d:70:ec:15:69:50:ba:70:41:9f:20:a3:85:
                    5f:fd:2e:67:13:87:5b:0f:e3:fe:f1:e6:f0:90:f6:
                    a2:23:0e:6e:c4:16:cd:ca:a5:a0:9e:30:05:43:55:
                    05:a3:38:77:68:6f:09:57:fe:7a:43:83:0f:d5:ad:
                    ef:a8:6c:4e:fd:0f:69:98:79:5e:8b:a0:42:46:eb:
                    15:8e:3b:4e:53:54:f0:a0:fc:4d:5c:ee:a1:96:f0:
                    74:d1:b3:e5:ee:1c:51:bf:aa:a7:38:9a:69:0f:8d:
                    06:65:1e:09:71:e0:75:6e:17:03:17:ba:57:8a:73:
                    37:0a:e2:19:4b:f0:07:5d:93:52:3f:af:bc:4f:14:
                    c2:24:23:e5:f1:19:f2:d1:a7:a3:c9:cb:1e:c7:40:
                    5f:93:a3:74:94:79:81:d4:99:d6:7e:c6:a4:bf:73:
                    92:df:53:40:c6:bb:14:cf:ed:47:3e:ce:32:83:1d:
                    aa:b9:fc:e4:3a:dd:73:50:6d:a1:b3:14:5d:d6:6e:
                    ae:20:f9:b0:95:76:cc:1e:10:0d:b7:82:5b:5d:d5:
                    53:72:b1:96:d4:88:b7:a5:1c:17:00:eb:51:64:41:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:06:2F:33:55:D8:6F:F3:1E:03:C9:38:CD:5E:B4:C3:D3:1C:0F
            X509v3 Authority Key Identifier:
                keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:ae:ff:a8:f5:3f:95:95:0f:94:cc:82:d1:03:9a:be:87:
         c8:40:db:1b:4e:09:fb:e3:84:fc:1b:0f:b2:93:77:b2:2a:c0:
         2a:e9:23:39:fb:69:8b:c7:68:5c:37:7f:2b:be:07:7e:b7:0c:
         2f:36:8d:a6:8f:bc:33:69:bf:3c:44:89:53:7d:6b:2d:36:18:
         1c:66:37:ee:3e:96:35:fc:18:18:e3:90:b8:02:83:9f:e6:dc:
         01:93:fa:16:73:7e:17:19:b9:62:cc:d7:05:8f:67:47:7b:dd:
         83:2f:de:e3:3a:89:89:08:37:c8:a7:10:39:f5:b3:84:9b:93:
         6e:e5:f1:27:53:ce:4e:f5:d9:00:6f:b9:bb:a2:91:f4:ea:1d:
         90:ae:eb:46:af:b2:72:97:c1:d0:c3:2b:ea:7a:d2:2c:48:a8:
         d2:f4:cc:58:b8:9c:39:f1:1d:82:f4:52:7f:92:ee:82:dc:f8:
         6b:bf:e1:64:47:d4:1e:11:ac:9c:42:39:81:f6:60:0b:04:c0:
         d9:8f:9c:4c:70:e9:ed:51:27:78:4b:ba:17:c4:a5:30:c6:22:
         50:4f:bf:14:fa:84:e0:1f:8f:0e:ff:ab:7e:ab:fb:06:bb:79:
         de:05:98:b1:fc:64:b2:e7:74:a5:48:e2:d3:3e:01:a2:35:23:
         4c:b7:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----