Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File:                     RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier:          bFjUMBbD3A/wJmVIOSrxsD2pFoespxxoTjFAtd/Zsgg=
Subject key identifier:   13:A3:9C:F9:9B:A2:6C:EA:E1:41:C4:AD:41:0E:45:FD:96:62:7E:A1
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer:       /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial:       01962E618F835B3C2EFAB0D711E3637067B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number:          0575
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: AwCT/St8yJuVBaaDld8LKg6RcfYwN8LAxYKw/SaZ9oQ=)
                          2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8f:83:5b:3c:2e:fa:b0:d7:11:e3:63:70:67:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=13a39cf99ba26ceae141c4ad410e45fd96627ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:43:ea:68:4a:8b:07:41:83:ec:d6:65:44:
                    0c:8c:b2:71:a3:86:07:bf:75:72:57:d9:16:0a:57:
                    29:37:b2:b3:19:38:fa:43:3e:5a:52:c6:f9:4e:cf:
                    fb:18:27:47:8e:60:51:68:c7:c1:90:f9:16:7b:e3:
                    76:b9:87:39:88:da:5d:a7:2a:44:c5:3b:1e:06:59:
                    ec:db:93:0a:36:36:b2:6f:a3:cc:10:de:3c:20:f8:
                    b1:62:04:05:24:a0:34:1b:98:4c:79:f3:f7:b3:02:
                    f4:02:44:a5:d8:34:d1:e0:a0:f8:cc:f1:27:5c:25:
                    d2:31:e5:a2:80:14:d7:73:e9:04:59:85:c1:45:80:
                    77:07:25:6a:12:c5:08:e6:25:7f:70:20:c1:62:1c:
                    e7:73:a6:8d:3d:e2:03:9f:f3:f9:ed:6c:02:f1:b9:
                    cf:56:72:6d:d3:34:92:87:c0:06:de:ca:2e:cb:0d:
                    f2:22:4f:13:79:29:c8:80:93:73:55:6f:da:26:83:
                    30:c3:44:fd:5a:52:ce:ac:c7:b5:9a:07:e3:81:ec:
                    05:0b:79:b4:39:f7:fd:bb:fc:82:90:57:41:32:7c:
                    43:0c:aa:e0:56:fa:80:b3:42:2b:37:56:fd:5a:02:
                    db:4c:fc:f8:b4:5a:65:04:9c:a6:ad:63:c8:73:50:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A3:9C:F9:9B:A2:6C:EA:E1:41:C4:AD:41:0E:45:FD:96:62:7E:A1
            X509v3 Authority Key Identifier:
                keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:64:aa:d5:37:8f:7a:88:e9:1d:62:68:5f:47:42:10:67:
         62:4d:fc:ae:d3:dd:f9:11:df:dd:9a:dd:24:a6:31:f7:43:a9:
         dd:d3:72:c6:ad:fc:a9:ef:29:cc:d9:99:17:a7:5c:fa:12:44:
         15:bd:49:e5:4b:f1:c9:c7:19:5b:28:38:e5:15:54:8d:76:8d:
         3c:86:16:21:f4:5b:a0:60:6f:d3:63:ee:0a:9a:84:16:fc:a2:
         1e:91:a6:68:e7:cc:38:3a:c5:35:41:d3:01:e4:b1:33:6a:2a:
         bb:73:22:a5:03:01:65:1f:7a:bd:13:57:29:19:e0:e5:66:22:
         38:b6:5f:f8:1c:8a:c9:bf:6a:4a:53:0e:bb:8c:e9:4c:2b:9d:
         09:0a:d2:5c:3f:c8:6c:7e:61:5f:6b:6f:2d:fc:a9:8d:c5:ba:
         ef:15:c9:14:e1:42:12:e1:23:d0:4f:48:83:9e:f0:80:34:fa:
         df:4e:82:1a:cc:05:ff:5d:b1:f6:be:f0:8f:ef:8a:1e:d2:db:
         8a:c0:6c:ee:ca:38:0a:98:f8:e3:b2:81:fa:c5:c1:8d:24:f1:
         3d:44:dc:28:29:a0:83:fa:47:fb:4c:73:dc:3f:64:5e:45:54:
         5f:2e:aa:83:22:ea:f0:2a:f1:d0:f5:f6:50:c3:f0:9e:22:73:
         9b:1f:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----