Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          LRolI3CBXeiGfI5MvSHgrLNat+bDx9NXIURHm2AsMXA=
Subject key identifier:   08:6B:46:7A:DD:F8:1B:31:36:2B:44:95:07:AF:33:87:64:5C:37:BB
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       01962F74EA26A28157D703FAE1724C8DFC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          0400
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: 8zwXiJEy/BprpcpmRp+QxruAuVfEWx0HgtfjccG54gs=)
                          2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ea:26:a2:81:57:d7:03:fa:e1:72:4c:8d:fc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=086b467addf81b31362b449507af3387645c37bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:9d:00:19:a1:73:28:c9:79:8a:d4:23:1a:
                    f3:1c:4b:5c:f8:0d:3c:7f:22:0a:86:e9:f4:85:4a:
                    1a:bc:a0:a9:eb:e0:59:4a:5e:04:3a:01:46:1a:c1:
                    33:25:10:33:77:91:b3:1b:c9:8b:80:46:1f:cb:62:
                    e0:bd:4f:82:c8:99:77:90:c1:86:83:45:1b:e1:83:
                    92:ee:58:bf:74:a9:2f:1e:a0:bf:30:9d:c8:3b:c8:
                    34:e6:d3:e7:34:46:39:c8:63:28:b8:d7:40:29:e2:
                    ff:9d:19:10:11:36:00:04:6e:b8:07:de:72:32:c3:
                    90:92:66:3b:53:b0:4b:1f:2c:1d:d6:05:4c:d6:e6:
                    78:8e:97:15:f2:cc:4d:a4:ef:e9:13:c4:36:02:cc:
                    dc:35:b7:68:27:b6:8c:82:e6:bb:14:8e:98:d3:d7:
                    19:77:02:05:46:47:29:9d:06:aa:6b:b9:10:cb:87:
                    3c:39:c7:40:66:e4:f1:af:64:7b:f5:23:91:3a:68:
                    64:66:a0:ea:0f:40:1c:52:ff:32:c3:b8:a6:38:57:
                    04:77:5e:89:3d:b9:41:16:8b:3d:f2:9f:5d:ba:3d:
                    f5:4f:2e:2f:ef:d0:1e:e6:2d:d0:fc:63:3d:f7:74:
                    42:19:b5:12:80:24:da:86:6b:51:4d:7d:2a:d4:2b:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6B:46:7A:DD:F8:1B:31:36:2B:44:95:07:AF:33:87:64:5C:37:BB
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:03:1a:cd:85:08:7f:cf:51:d6:5c:b8:7e:3f:6e:9f:4a:
         10:63:79:12:c8:56:29:62:89:60:90:32:3e:ac:a5:76:7f:26:
         84:02:f6:da:5b:58:ee:e1:8a:9b:12:0f:c6:53:3f:e9:da:66:
         4a:ce:26:f4:aa:c4:b8:41:53:ac:3a:5e:04:6d:5e:f0:a3:4c:
         4e:81:db:19:43:23:31:ea:07:f8:d9:c8:27:01:56:1b:71:87:
         8b:5d:5f:27:34:1e:3f:33:10:f1:8f:be:76:f8:78:aa:23:ce:
         ce:a0:ad:ca:d9:bf:d2:09:47:3a:97:ad:a8:0d:4d:e5:ee:65:
         80:a6:02:8e:f1:05:83:f1:5a:b7:24:e7:48:72:a7:5c:78:1b:
         d0:0d:0d:cc:3d:22:2a:3c:2e:35:04:b2:b8:c9:84:2a:3b:0a:
         18:2c:9d:99:c4:7d:01:54:b9:a1:28:7e:a5:87:9d:b1:dc:bd:
         87:61:b9:74:13:32:0e:ed:ea:44:f8:1b:9f:0b:7b:a3:13:73:
         ce:ae:56:59:0e:14:9b:f9:15:c0:36:d1:8d:8a:60:8d:3a:a9:
         50:1e:8a:ec:97:4b:ed:13:77:b1:66:24:8d:90:63:0d:b7:4e:
         68:1d:06:bc:37:0f:07:2c:6e:77:30:e5:ef:39:88:e9:34:47:
         67:92:11:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----