Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File:                     90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier:          REeaWrpDbwl65biDpDvvQWIDZxkydpqifhfzs7/CiYQ=
Subject key identifier:   0A:C1:D6:75:26:57:B5:56:C7:4D:46:77:99:67:84:CB:9C:AC:6E:5F
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer:       /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial:       01962ECF73DCEF11D41C15135F5FCC37B875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: cZN01wG4nRKlvNAv0WZkTkD77BAGMtErAwKsMmNQZ9c=)
                          2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:dc:ef:11:d4:1c:15:13:5f:5f:cc:37:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=0ac1d6752657b556c74d4677996784cb9cac6e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:bf:9a:41:a4:35:e9:83:66:42:00:e3:62:
                    4b:22:ff:d3:64:ae:37:8e:80:0a:43:24:ec:e8:9b:
                    bb:9b:7d:48:8c:09:d6:a1:7b:67:c3:37:03:51:23:
                    54:21:99:db:8d:f4:8e:75:4e:ee:7c:f0:59:e8:4d:
                    0e:bc:e2:17:0c:fd:bc:97:57:87:eb:32:81:f5:7a:
                    aa:4b:69:38:11:b7:c1:cd:3b:18:b9:67:e0:b5:44:
                    56:5f:46:91:32:b0:fa:10:12:1d:c1:73:25:58:51:
                    f8:7a:5d:0c:65:1b:43:e9:4c:c8:ff:d2:24:3d:d7:
                    69:a3:69:3f:d6:bf:be:77:a0:7c:46:1b:6a:63:9d:
                    cf:ce:ad:27:ce:98:51:b4:81:bd:d8:81:67:2b:45:
                    fc:ef:6b:07:43:3f:eb:42:38:7a:99:fc:ac:d2:09:
                    04:96:ba:95:f3:e6:00:9c:d4:b4:4b:3e:f3:29:59:
                    80:cb:a5:20:96:12:6b:2c:78:79:12:24:4b:bb:63:
                    42:51:82:88:44:ed:d8:7a:04:6b:10:89:14:63:b8:
                    45:41:b9:0d:ae:50:97:0d:c3:a9:ac:8f:63:f0:d4:
                    f8:d5:3e:bb:8e:1f:c3:74:bf:79:22:51:4d:d1:19:
                    de:6b:69:a6:06:80:43:a1:dc:9c:4b:25:b5:7d:5c:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:D6:75:26:57:B5:56:C7:4D:46:77:99:67:84:CB:9C:AC:6E:5F
            X509v3 Authority Key Identifier:
                keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:81:3c:07:0e:6e:f2:57:ce:dc:69:8f:1f:bf:b7:f6:33:e4:
         7c:b9:66:37:98:ac:ff:9c:08:7b:a7:42:8d:54:96:15:80:1b:
         43:fc:85:f7:21:d9:0d:2a:1c:50:2c:57:01:44:0c:5d:9e:cd:
         5a:42:81:19:cb:3e:89:db:33:71:22:ab:0a:3b:7a:78:f8:c4:
         5c:5d:d1:9d:bf:10:bc:20:1c:a9:94:61:7c:44:7d:70:f9:46:
         ca:87:50:f9:0c:39:33:9f:20:24:60:fa:b2:ff:59:28:cf:04:
         1b:2a:69:a1:ff:58:67:0c:77:53:78:2f:4c:0b:a1:c4:a4:a4:
         84:b7:11:58:13:98:18:9f:88:46:8c:24:0a:59:4c:51:e7:3e:
         36:5f:f1:66:c7:39:be:7c:3e:8f:00:0a:46:f5:fb:0a:64:20:
         cd:c1:3c:25:9c:7d:ac:0d:0b:93:09:ce:68:3f:e1:cf:db:f7:
         af:2d:64:f0:3d:0b:2a:a0:a5:c6:cf:2b:29:e4:ba:6d:6e:6d:
         7f:75:e2:18:84:02:0b:12:3c:30:52:95:a4:59:28:7f:c8:1a:
         93:fa:ea:9d:60:ea:60:d9:5c:08:d0:e2:17:c5:c8:19:bc:0b:
         97:52:e5:4f:e4:4a:e4:e4:87:8b:b6:31:fd:c0:3b:9f:1a:39:
         79:1e:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----