Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          Q5D9pYtVpQ3nNl3bjE2dvNlmxIoqIjkyOOWAv4vg15I=
Subject key identifier:   01:8A:A3:4F:DE:4D:D0:E3:35:54:82:DD:D9:D0:AC:F9:58:49:38:97
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       01962E61C09BB2743197B86B2C9D8BA68419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          1165
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: 4Wqs+mhVEShefE4gfpVo83PIkswG/hgZaMEWaV1hXtE=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:9b:b2:74:31:97:b8:6b:2c:9d:8b:a6:84:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=018aa34fde4dd0e3355482ddd9d0acf958493897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:c2:fb:b6:7c:37:d3:46:06:92:f4:f1:cc:
                    de:d7:ab:fa:9d:52:e8:1e:55:e4:35:5b:44:0c:8a:
                    29:e2:cf:24:af:e2:91:15:ed:da:1f:c5:29:35:1f:
                    3a:ad:d7:0b:a9:a5:3a:2f:c4:c4:96:2a:fe:33:33:
                    ee:11:5b:d9:ee:ce:a8:75:83:35:28:1c:07:ec:bc:
                    35:3c:09:e1:25:09:99:ab:6a:d6:e4:39:66:26:40:
                    03:8d:db:ee:fe:b8:40:55:2d:57:d8:3c:fa:ed:2a:
                    52:bb:1e:6c:5e:08:22:71:e8:49:3e:a9:2e:9e:56:
                    e5:61:14:fd:e7:b0:9a:ac:8d:32:da:9d:8a:10:b5:
                    ca:f3:53:74:2f:78:bc:28:27:99:60:ab:14:7b:1f:
                    90:86:cc:df:cc:26:c8:b4:b4:54:1d:d1:c6:39:7d:
                    e4:68:24:df:83:74:6d:3e:58:f7:44:56:ee:09:4c:
                    58:f3:f8:69:44:b2:01:bd:e9:09:62:e0:34:1f:f8:
                    b9:d7:9f:c2:d6:64:9a:cf:6c:ec:f7:98:c8:c5:48:
                    e4:d7:5c:99:98:d9:a2:04:15:4c:32:7d:a8:d6:8e:
                    c3:d8:10:60:f3:9d:8e:6c:a8:09:a6:d0:ac:60:46:
                    09:0e:bb:12:be:9e:ea:ea:c2:54:9c:c6:cb:c3:78:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:A3:4F:DE:4D:D0:E3:35:54:82:DD:D9:D0:AC:F9:58:49:38:97
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:70:0d:23:8c:8e:75:66:eb:69:2f:81:05:00:6f:7f:fe:bb:
         c3:c1:11:b1:1c:97:98:f6:6c:fc:f1:7d:74:17:96:5e:8e:51:
         0a:ff:d8:1a:b5:dd:e2:f5:89:d8:e7:98:3b:72:47:df:c4:af:
         e0:7d:31:20:58:db:5c:cb:05:89:7b:3a:de:3a:ca:ef:89:24:
         ac:4a:82:14:0f:47:8a:7e:8b:ad:0c:22:08:fe:8f:0a:b6:2d:
         aa:e9:f0:72:6b:fc:80:cd:37:ec:af:f5:4a:3f:d2:c6:f5:1f:
         12:31:90:45:f5:92:58:f1:ac:99:18:5a:c7:43:eb:f2:fb:ce:
         cb:eb:3b:f3:c2:60:4e:2c:a6:2c:04:6f:f1:3b:e0:05:63:ca:
         9e:fc:9c:20:d5:02:55:05:0f:12:f1:50:4b:9c:36:f2:a2:8e:
         b7:8e:13:41:3d:8f:1a:3f:26:51:4d:8d:8d:9e:22:2d:23:62:
         4c:80:e5:68:96:0b:37:b9:ed:4c:96:e5:41:f9:35:44:18:c7:
         28:5b:e7:c0:85:bc:0e:63:44:52:b9:f3:f6:d6:73:dd:8b:17:
         99:1d:49:21:fd:03:a0:fa:6a:ad:d8:a8:ca:d4:8b:f8:e8:82:
         a3:6e:93:0d:20:ae:82:11:d3:4a:82:f3:00:c0:6b:4c:6e:68:
         42:09:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----