Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File:                     dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier:          KlTU/B75d0etK8PYd4gz8dB+BoCUs2Ewi5qohgjrr/A=
Subject key identifier:   0D:7A:5F:FF:3A:54:EF:26:05:9B:23:C5:A1:72:0A:4D:8F:85:ED:78
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer:       /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial:       01962DF4524467B7143353788D8CD095276D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: IfeT4eh2Z8hVFFasS7olBaJV9K6hIYMA7QiXKPrApYs=)
                          2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:52:44:67:b7:14:33:53:78:8d:8c:d0:95:27:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=0d7a5fff3a54ef26059b23c5a1720a4d8f85ed78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:ab:60:2b:98:66:78:1a:be:fb:57:b3:68:
                    df:35:20:a3:66:1b:df:da:d6:b2:76:03:2c:cf:1e:
                    54:38:51:43:3b:2b:e2:5a:7d:a4:17:0f:ce:22:06:
                    43:19:1d:25:78:12:d0:a1:cb:8c:4c:ee:4d:5f:04:
                    f4:95:9c:60:f3:9b:c7:0b:9a:c8:17:a6:ae:f7:c4:
                    20:30:38:00:ed:4f:8f:23:ba:1d:68:a4:dd:65:03:
                    e2:31:7c:2a:cf:cc:fd:27:d7:52:dd:37:94:b8:71:
                    aa:6d:45:b5:00:eb:4f:b9:15:d6:89:e5:3d:ec:b7:
                    c9:ea:fd:16:49:f0:44:6f:69:f5:f1:e3:7f:73:2e:
                    af:38:b8:49:6a:0b:cf:c4:a6:48:b4:2b:38:c6:45:
                    45:62:50:40:ef:8c:83:f9:e0:9c:0e:ce:0d:7a:ba:
                    ea:c2:0b:cb:1f:14:a0:02:28:a0:e4:d2:93:ab:9a:
                    4b:0d:97:d6:c3:56:f9:7a:b7:ee:43:23:3c:cf:28:
                    f0:c4:42:07:59:68:74:02:de:95:55:fa:7f:b6:c2:
                    36:66:4f:ad:43:53:55:f2:35:4e:32:d7:b8:87:b1:
                    6d:1d:5f:56:95:7f:9c:bb:3b:47:27:6b:0f:6c:e5:
                    29:71:df:d5:46:ff:e3:8b:5b:f6:ba:c4:3d:46:e7:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7A:5F:FF:3A:54:EF:26:05:9B:23:C5:A1:72:0A:4D:8F:85:ED:78
            X509v3 Authority Key Identifier:
                keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:92:db:7d:ed:2e:56:91:d2:41:b3:9e:95:e6:53:27:aa:
         95:33:f2:f4:88:1c:7b:d9:af:0e:0d:8b:58:25:8e:ec:13:10:
         c4:eb:e5:8d:9a:68:60:8b:f1:98:70:5a:32:53:05:0a:28:01:
         50:c7:a1:9f:16:77:db:37:df:13:51:b8:0f:f9:50:21:b6:1a:
         a3:84:69:17:a9:41:f4:e2:f9:be:ad:f7:b6:e6:d0:cb:84:20:
         2d:3c:31:fc:df:99:af:42:19:c9:d7:1d:32:5b:64:7e:19:33:
         a7:c3:a9:6e:aa:ff:28:01:18:ff:cd:16:5f:34:1a:0f:c4:b0:
         41:6b:c3:e3:9d:e1:57:b0:4d:e5:16:0a:46:ef:41:d2:04:7b:
         0c:54:79:c5:00:3c:8f:38:e9:43:7c:6b:6f:bf:c3:e6:8c:00:
         5b:b6:36:3f:d8:dc:9f:91:6d:e2:4e:c8:63:60:c7:d1:dc:8e:
         0c:f0:3b:a5:1e:ec:70:3a:64:e1:b9:db:3b:29:2d:05:67:02:
         f6:77:89:a0:d8:40:5b:07:ec:42:6e:29:03:ba:b0:b7:82:4b:
         74:e3:8c:d0:02:b6:d4:16:b3:58:f4:83:4a:51:4e:cb:82:c8:
         3d:5e:2e:ad:52:b7:00:70:6d:35:4d:88:c1:cd:5d:40:98:6c:
         fb:32:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----