Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File:                     1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier:          2yHe/nrnvpj1tNOsIaROllTnfKwL98g3rEXFzwWFRLQ=
Subject key identifier:   D2:20:10:D4:7A:8D:A0:0C:C7:AD:20:13:36:05:D3:AC:52:93:B7:56
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer:       /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial:       01962E2AD06EB64CB201CCF8A6DD30BACEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: a92WzeoLVKKMY0QdMDFob+lrlcmVMnzGIe5cZNZQ7CE=)
                          2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:6e:b6:4c:b2:01:cc:f8:a6:dd:30:ba:ce:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=d22010d47a8da00cc7ad20133605d3ac5293b756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:65:a5:c3:e5:7a:40:f9:3f:f2:96:fa:d5:
                    ec:0b:3d:fa:d4:e6:d1:fc:af:e1:63:45:a4:63:fc:
                    f0:a4:d3:79:6f:01:38:5c:ba:72:ae:fa:f3:8e:70:
                    71:6a:3f:ca:23:84:4c:26:c5:a5:f1:da:8a:b0:2b:
                    f5:39:28:9f:ee:91:ac:3c:75:e1:ca:1c:e8:c6:41:
                    c2:4d:97:91:8f:24:c7:8a:12:4e:b5:84:ae:f1:af:
                    14:0b:65:d4:6c:d5:01:16:03:32:f8:8a:f0:13:c7:
                    89:a3:e9:63:cd:ac:62:53:61:03:fc:54:7f:9d:5a:
                    02:da:49:de:12:9b:d7:93:29:ee:06:ce:04:33:2d:
                    09:70:de:ff:8a:7b:bd:4a:b7:d7:d7:01:56:07:39:
                    4e:37:b5:38:46:5a:0b:d6:87:15:55:0b:31:27:13:
                    1c:9e:c0:e0:48:e1:8e:01:a3:5e:bb:1a:30:1c:e8:
                    e2:32:5a:aa:b7:03:10:72:87:19:a5:1d:a7:27:f5:
                    8c:9e:84:24:b1:8b:b4:86:38:f6:3f:67:8a:3c:2d:
                    79:66:25:27:b0:cb:12:ff:2d:50:b2:29:c2:c8:e4:
                    07:89:07:43:65:d3:79:10:f5:d9:86:0a:37:d3:3a:
                    da:2b:aa:ad:26:52:17:b1:3e:40:3e:da:d3:f7:8c:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:10:D4:7A:8D:A0:0C:C7:AD:20:13:36:05:D3:AC:52:93:B7:56
            X509v3 Authority Key Identifier:
                keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:27:73:71:73:e3:4b:20:13:8c:6c:80:ae:06:86:f5:58:e9:
         bc:24:0a:7d:b6:97:13:df:65:21:95:b1:ba:f1:71:1b:c3:d9:
         4c:61:b7:99:51:16:83:08:91:d6:53:26:58:49:4e:63:1d:99:
         3b:b3:c5:4c:48:a5:de:fc:fd:90:ad:74:73:36:58:16:35:c1:
         8d:cc:81:50:00:1a:4d:3b:60:89:38:ab:39:0d:6e:9c:93:fb:
         c1:48:8f:49:f6:0b:fa:d8:95:4c:7e:49:26:c4:91:df:7e:1a:
         fd:ed:62:d6:28:89:97:cd:63:d0:9d:d3:d3:aa:88:0d:65:41:
         78:6c:31:d9:37:db:95:8b:6a:b2:2d:f5:b1:38:c6:bf:89:25:
         7f:4c:2b:d2:d1:60:3a:dd:62:49:b2:f8:1d:dd:53:ec:79:5d:
         9d:f3:9b:97:6e:9a:13:cf:94:7f:e1:b8:c4:97:93:94:94:03:
         fe:1f:db:0d:c2:e7:4d:9b:b1:55:eb:5b:6b:ec:93:d4:f5:2a:
         e7:c2:d2:b8:7a:1a:58:a5:bf:f4:77:cb:9f:2f:b0:26:fe:05:
         d4:16:cd:40:04:28:26:ae:26:e4:84:77:7b:a7:5d:0f:f5:a3:
         da:79:24:ce:75:fb:aa:a3:12:bf:0f:49:db:73:87:d0:0c:e1:
         80:15:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----