Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File:                     DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier:          0kuSvNDVjzjXTq+p3w7j0GhMne0b92voEXoA8vm3hzo=
Subject key identifier:   0B:BB:9D:CE:64:7C:D0:7A:E0:DF:63:E7:90:6F:96:73:9E:D9:51:5E
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer:       /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial:       01962FAB64ADA1B2F2F4035CA3A4BD5E6829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: Zt5c3EZs/XdIpmNX4ij0vvQUgYdaz5cWCjnkdbJo/Rw=)
                          2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:ad:a1:b2:f2:f4:03:5c:a3:a4:bd:5e:68:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=0bbb9dce647cd07ae0df63e7906f96739ed9515e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:fc:51:2d:e0:c4:08:be:05:36:a1:2f:c8:
                    0f:3b:89:8a:d4:ec:ab:c4:78:76:f1:24:54:25:f1:
                    f4:0b:bb:dc:c3:3a:8a:e6:33:a2:30:7b:f0:19:c3:
                    bc:5e:cf:b5:c6:18:5b:64:3e:aa:91:7c:f9:79:46:
                    54:57:f8:24:84:44:65:eb:49:10:9a:92:b7:d3:f2:
                    34:81:14:15:c0:83:7b:d2:76:95:56:ad:d8:c0:7d:
                    dc:13:3c:88:5c:8d:e5:db:30:80:9d:50:3b:d9:bf:
                    c3:e6:78:f0:27:76:db:fb:20:ce:bf:62:61:25:42:
                    be:6e:98:fa:ff:8b:a6:52:f0:12:39:72:e9:1f:0f:
                    87:ae:30:2a:eb:f6:27:0f:99:1b:79:99:db:ee:14:
                    c0:87:e9:f0:db:66:b2:46:a7:1d:c0:f8:2b:e9:2b:
                    18:fc:b9:a4:98:8a:f3:8f:75:10:93:5a:7b:9f:76:
                    1a:62:de:a7:4a:bb:eb:13:45:e8:b2:a0:14:3f:10:
                    e0:ee:d1:09:15:c6:96:eb:57:1a:e9:8f:93:8c:0e:
                    24:05:da:ad:37:8b:dd:0f:c0:66:97:60:25:f9:f6:
                    2e:44:de:8b:0c:14:3f:d7:41:03:6b:30:04:7b:81:
                    62:d3:3c:1f:0d:cb:ab:8d:86:4a:84:11:2c:9a:f5:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BB:9D:CE:64:7C:D0:7A:E0:DF:63:E7:90:6F:96:73:9E:D9:51:5E
            X509v3 Authority Key Identifier:
                keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:56:ef:db:83:71:d7:03:9e:78:56:da:32:68:86:4c:7d:
         b2:a0:53:77:a7:21:c6:f0:a2:d1:be:9b:a4:66:cc:9e:e5:36:
         d2:35:5b:f3:78:79:0b:e5:ce:76:b9:94:d0:a3:00:fa:0c:30:
         d1:bd:83:fa:15:06:4c:f5:d3:f4:25:d4:59:f5:c6:16:c7:01:
         71:f3:e6:cc:81:f8:cc:1c:cb:d4:db:2c:5d:fe:14:18:ce:d9:
         08:a3:85:02:0a:90:10:77:4e:ee:dd:30:d0:02:0b:c8:32:9a:
         d8:40:f2:67:03:f2:3c:e8:5c:92:5d:b7:98:f4:85:d1:c7:1e:
         29:2f:fa:6b:26:01:bb:03:c1:f8:69:44:d3:1a:6b:5d:8c:76:
         d9:9a:28:b1:11:ca:7c:2e:5a:18:8c:cb:f9:7f:63:9e:18:fb:
         f5:2b:b5:4e:53:23:94:31:e0:e1:19:ad:36:e3:3a:fd:85:a4:
         f2:a9:f6:6c:70:06:c4:d4:41:a7:bd:be:1e:4e:54:b3:f9:9b:
         4e:2e:1e:b0:04:26:19:ef:d2:9e:7d:30:00:37:1b:a6:d6:4b:
         52:68:f3:a2:81:e5:2b:85:c5:bb:d2:89:9e:f2:29:60:97:4c:
         87:9f:2b:02:2b:c0:95:4e:43:a8:8d:be:b5:64:5d:79:cb:a4:
         6a:ee:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----