Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File:                     tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier:          dNmj55e6FsoXuhS8DrURykvGqyiMlUdPi75lz7Rx7SI=
Subject key identifier:   34:6B:4A:92:CC:87:B8:36:26:D5:0E:D5:18:2C:09:4B:B7:09:CD:0C
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer:       /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial:       01962DF40C335BAAB6372AD9EC7AD558A3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
                          2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: ZCwkFtG4SBVUSgRJ4YxaBNGMt6wGJSnceXPldKUNHVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0c:33:5b:aa:b6:37:2a:d9:ec:7a:d5:58:a3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=346b4a92cc87b83626d50ed5182c094bb709cd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:bb:bb:11:ab:c5:1e:ac:4f:b7:9f:95:61:
                    07:33:c8:1e:0a:80:60:57:dd:59:c4:65:6e:14:a9:
                    95:63:40:76:3b:5e:1e:f2:39:5b:f0:c6:fc:4b:26:
                    41:bd:f2:0d:99:3c:2d:a9:78:49:3f:bc:41:ba:81:
                    1c:a8:2d:17:9e:02:d2:dc:01:d5:f7:c7:15:5c:e5:
                    b8:6c:89:78:35:bd:99:eb:20:9d:8a:2d:69:71:57:
                    b3:89:75:80:2a:d3:bc:d0:ae:bb:0b:34:e2:02:90:
                    25:ec:1c:3c:3c:37:9c:aa:b4:f0:e9:35:de:15:99:
                    e7:67:c3:68:f3:f5:66:88:18:55:f8:d3:5e:2d:36:
                    98:e4:36:51:25:fe:5c:6a:92:0b:da:ca:26:f4:83:
                    54:af:d3:a0:f5:ec:e9:4e:e9:67:f9:cc:37:ff:09:
                    a9:15:42:5f:98:42:79:da:af:f0:a7:2d:f8:9e:da:
                    1b:72:92:fe:1b:6b:5b:5a:fa:f6:22:0e:b1:07:5d:
                    a2:a2:da:17:6c:e8:ec:ba:57:37:26:6b:e5:db:8e:
                    cb:4a:a7:74:40:2b:1a:6f:b4:23:cc:03:28:e6:68:
                    eb:f9:0c:68:be:d6:91:e5:2b:bb:c7:e4:76:98:0c:
                    b1:37:8f:e3:87:35:bf:9b:a4:c9:10:70:8f:4f:83:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:4A:92:CC:87:B8:36:26:D5:0E:D5:18:2C:09:4B:B7:09:CD:0C
            X509v3 Authority Key Identifier:
                keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:93:ce:2a:a1:82:3f:ce:af:0d:b3:97:8c:ce:ec:de:45:
         69:7d:14:89:d6:3d:ed:e4:b0:54:31:e7:ff:1e:d6:44:5d:4f:
         01:12:e9:bd:b5:12:51:33:dd:1b:53:22:02:a3:d4:9e:01:1a:
         e3:a1:99:51:c0:c6:97:6a:ce:68:d0:57:cc:5a:f9:f9:36:78:
         d8:bc:9f:5f:ce:13:12:0c:c8:f9:93:00:82:72:fc:d5:6b:ff:
         e7:6b:90:ab:e3:7f:fe:4d:07:0c:59:30:8d:e1:8e:aa:ea:6f:
         3d:ad:ba:71:65:fa:77:77:8a:3f:8c:2f:f7:ea:f0:99:6b:4c:
         8b:ac:27:85:92:db:41:ca:ff:94:74:cd:84:a5:23:08:9b:d7:
         d2:12:22:b3:9c:d3:f4:0e:e7:6a:33:a0:ee:5a:2c:5f:f6:be:
         84:23:2e:fb:2d:ae:06:f5:38:10:7a:92:e6:24:1b:5e:25:4d:
         21:4b:f3:cb:5a:77:b7:34:ae:90:ec:74:c6:cf:59:48:c2:86:
         35:55:59:63:76:60:a3:74:9d:7c:19:87:00:aa:d6:0e:34:aa:
         cf:3a:e3:3b:16:83:a0:0c:ca:54:39:70:f5:0c:9d:17:40:d1:
         72:e7:24:98:c6:75:df:4f:cd:85:7a:a0:cf:7a:0f:8c:d3:bc:
         b7:af:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----