Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File:                     9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier:          AJoQy++zSBFep7wz6w8lCKk0VCsHFyLFGwDYUNqu1oM=
Subject key identifier:   5A:8D:2D:27:8A:57:8C:04:EF:D9:AB:92:AB:E2:A6:9B:71:6E:48:B9
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer:       /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial:       01962F06813CC868002BFD7FFBDC3AAEE7B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number:          0BB6
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: I47keC1xYD4utZfYd+Q4Z44w5RtZHHevqq/9NFLJ3wg=)
                          2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:81:3c:c8:68:00:2b:fd:7f:fb:dc:3a:ae:e7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=5a8d2d278a578c04efd9ab92abe2a69b716e48b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:a0:49:67:0c:68:4c:1a:5b:d2:3b:09:33:
                    7e:87:b7:5b:2a:9f:11:bb:f3:b8:11:7c:25:25:d6:
                    5a:d1:45:67:f6:a2:93:6c:83:17:c7:17:21:b9:13:
                    13:55:4a:14:b5:fd:58:90:27:94:1c:6e:42:6c:ee:
                    2a:ad:f6:d0:aa:42:59:71:6b:c5:38:be:bd:3a:4a:
                    fc:76:c8:2a:92:25:ff:93:d3:88:3f:54:c6:94:8b:
                    1d:c8:d3:ca:ca:f1:44:0b:0b:2f:ae:0c:b1:88:af:
                    d6:f9:a3:dc:b1:44:2e:cf:ed:18:f7:30:99:c6:ef:
                    65:ad:84:66:6c:80:43:96:65:40:58:13:a1:58:04:
                    8c:92:68:6e:1c:a3:44:f5:1d:21:2e:78:e6:db:10:
                    60:26:4d:6a:03:9d:93:59:04:50:8a:86:9b:de:42:
                    c2:25:fe:21:ef:37:d0:cc:1d:80:5c:2b:ce:41:03:
                    33:a7:11:c5:81:25:07:93:53:68:30:1f:81:0b:8a:
                    23:dd:3f:ed:27:b5:a8:d6:3c:ff:60:2e:ca:f6:fc:
                    3e:ec:f2:ee:f1:a4:af:9d:d6:99:61:3a:68:84:bb:
                    4a:fb:26:56:b6:dc:51:99:8a:71:b6:e2:a0:00:a4:
                    f8:41:d7:a8:4c:93:c0:7b:60:83:31:87:58:87:35:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8D:2D:27:8A:57:8C:04:EF:D9:AB:92:AB:E2:A6:9B:71:6E:48:B9
            X509v3 Authority Key Identifier:
                keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:42:96:88:a4:57:fc:40:9d:d2:cc:90:4a:c4:a5:14:36:0b:
         39:69:4a:89:f7:63:e2:d2:5a:7c:70:05:34:08:c2:e1:d9:73:
         bb:6d:47:af:a5:54:66:18:64:3d:c0:7a:30:f3:55:5e:01:89:
         f7:d9:b0:08:ef:e6:65:36:7c:a9:b1:67:c2:34:29:ad:55:cb:
         bd:36:d1:19:7b:20:48:9e:0f:91:26:bf:19:80:a4:73:bb:d8:
         80:67:11:ce:4f:1c:58:0c:93:4d:f7:30:2f:82:b8:4a:b8:03:
         c9:b8:f2:86:fd:ac:8b:08:7f:7d:19:bd:13:87:ed:97:db:95:
         9b:99:be:f5:9d:e7:0c:56:65:4c:6b:85:ab:b5:d5:03:51:2d:
         bb:89:b7:c3:7a:1f:8b:06:56:05:20:56:48:3b:5b:9f:b3:89:
         81:5c:cc:c9:94:d0:29:c0:68:99:65:9c:c4:ca:52:22:36:96:
         e2:44:9d:68:01:e1:b0:c9:8b:3f:2b:34:c2:c3:5b:27:36:7d:
         80:62:7a:09:0b:f0:c6:e0:eb:ea:a9:83:0e:e5:03:b0:92:54:
         45:5c:9c:02:32:65:30:10:35:e7:21:40:f3:41:ef:b7:12:f4:
         67:36:da:0c:7a:2d:8a:70:39:6d:12:42:19:eb:43:0c:ce:89:
         cf:01:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----