Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File:                     AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier:          enVfUC8ABx07pkfNpaRUjqxGWSdcZLeQvqymkyvuTuY=
Subject key identifier:   30:A5:EA:0A:40:C4:63:D8:74:FF:38:C8:A6:B2:E9:4F:02:55:A3:D4
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer:       /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial:       01962E2ABB03058FA733C114C117113C593C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number:          07DB
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: T0lI9V7asdBQXt47QKDvhE6c0JF3LtZ/rsFl0lAZajA=)
                          2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bb:03:05:8f:a7:33:c1:14:c1:17:11:3c:59:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=30a5ea0a40c463d874ff38c8a6b2e94f0255a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:2f:cb:9e:51:1f:cd:aa:0e:a2:b8:2e:bc:
                    bf:03:a8:b2:d0:29:9a:66:ed:5f:53:db:ad:2f:71:
                    53:95:69:d4:0a:ce:a2:ff:34:be:be:83:f1:34:59:
                    1b:03:d8:c9:f5:bf:0c:42:2a:74:7a:4f:ff:3c:af:
                    41:2a:5a:fb:e7:80:73:f2:84:41:67:9c:be:4e:ca:
                    3e:0b:1f:1b:69:8d:22:f5:44:de:a4:bd:ca:53:84:
                    39:aa:33:32:d4:f1:30:91:d4:06:2d:3b:2d:1f:db:
                    cb:cb:75:d5:84:3c:a8:e2:2d:3b:b5:47:26:6a:d0:
                    d4:db:a0:44:bc:cb:23:b2:ff:bb:ff:84:f6:f9:66:
                    87:7a:ee:6a:ed:dd:46:71:2b:c6:58:8b:1f:76:75:
                    0e:56:30:58:5d:da:d9:c4:e0:b2:83:a7:1f:ff:8b:
                    ec:69:81:ab:fb:d6:39:66:c5:6a:03:97:99:1c:d3:
                    5b:26:04:13:36:d5:4f:2a:f6:7e:f7:a5:3f:da:8c:
                    8c:45:52:d9:09:fd:61:b4:73:a2:7b:75:02:ec:55:
                    59:e2:61:68:91:65:52:bf:8d:b4:22:2e:1e:bd:e8:
                    93:a4:fa:00:71:a5:23:76:e5:66:57:54:73:d1:0c:
                    d0:6a:fb:62:23:b9:94:10:c0:82:17:00:0d:f1:8e:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:EA:0A:40:C4:63:D8:74:FF:38:C8:A6:B2:E9:4F:02:55:A3:D4
            X509v3 Authority Key Identifier:
                keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:9b:7f:43:c1:f6:44:dc:23:00:b0:94:b7:72:e7:78:92:
         9b:ce:8b:d9:30:8e:64:00:47:88:88:86:20:86:8b:0f:a2:1e:
         02:ff:86:a5:55:7b:1e:04:f3:07:42:db:17:6a:08:f8:5f:55:
         db:1d:9c:e0:d8:8c:15:d5:16:a3:72:05:ee:14:39:a5:39:2c:
         bb:7e:5a:b0:35:a6:75:be:04:ee:d3:7c:09:d2:5a:7b:7d:3e:
         29:bc:c6:2b:d9:7d:25:96:8c:f8:d0:7c:8c:c4:6c:57:4c:b9:
         3b:8f:90:19:72:fc:00:f5:95:c2:8f:61:61:04:76:a4:c0:67:
         b9:56:f2:9b:c5:f6:27:4b:3b:ce:3a:da:ba:32:fe:c9:42:a1:
         6a:5b:f2:73:d8:2c:f3:ee:a5:2e:89:cc:c7:00:38:e7:d2:40:
         8e:52:0c:b4:51:5c:38:6d:30:ab:6c:8c:d3:a4:39:63:f5:17:
         9b:0b:c6:f3:7c:0a:bf:34:67:34:55:84:e7:22:38:20:71:d2:
         d7:9b:a5:a7:c9:d6:07:77:27:ca:9d:9d:b9:47:ba:b5:91:ed:
         b0:ca:31:9a:78:e3:6c:63:43:ff:84:79:0b:a3:e1:1a:81:bd:
         56:08:1d:15:1f:2e:c3:23:16:f7:da:ed:5e:a9:bb:93:5d:d8:
         87:23:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----