Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File:                     0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier:          gO4gIfWGA5UTumM+T34smq3eVEQydSPCrz/UAM6YZSY=
Subject key identifier:   D2:2D:26:44:AB:62:7E:AD:03:A5:69:81:D7:3E:56:5E:13:E8:BB:F4
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer:       /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial:       01962F7433FC8F5CBC28264487D64B44D8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number:          08EF
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: U2vBDnqxTwtmSsr4pJXanZwhfvBTMoTC9CBuBlAHJac=)
                          2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:33:fc:8f:5c:bc:28:26:44:87:d6:4b:44:d8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=d22d2644ab627ead03a56981d73e565e13e8bbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:15:78:f5:93:a2:a2:5a:e2:f7:8b:bf:b1:
                    6d:30:40:77:8c:f6:c1:ec:06:97:ac:c2:76:c1:b2:
                    56:79:69:c2:fd:36:4b:62:ac:dc:98:3a:68:9c:91:
                    b6:65:16:19:83:4b:75:53:c5:1b:0a:9b:c8:0f:88:
                    1e:a2:23:04:4f:ea:1c:96:98:02:7d:78:74:ef:9d:
                    dd:da:dc:34:60:5d:e4:3f:a3:c5:e2:74:b7:17:8d:
                    d1:83:0f:1d:3a:4b:e4:82:e4:b9:0d:c0:3c:ee:ff:
                    bb:7c:51:2f:a8:c7:5f:32:26:14:e7:75:91:5f:48:
                    c3:8b:20:61:a0:09:04:00:fd:27:a1:73:6d:94:b4:
                    45:5f:18:f1:51:0e:3a:bb:1d:64:65:ce:f9:0a:69:
                    c2:9f:99:72:3a:b9:7c:1e:c9:49:c2:0a:3b:33:3b:
                    68:07:e9:87:5d:95:fb:83:0a:4c:d0:7c:94:b1:44:
                    1a:1d:61:80:b7:8a:0f:25:27:65:e0:6d:7b:34:09:
                    17:97:91:fe:be:e5:d4:bd:64:bc:86:52:56:77:8d:
                    02:a6:25:13:ed:27:11:8e:f4:b9:83:c5:05:5f:d3:
                    21:83:39:b1:88:de:9b:fa:67:4c:b6:bd:da:4a:34:
                    18:6b:96:59:a9:ce:8f:c5:80:73:70:6f:26:ca:8d:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2D:26:44:AB:62:7E:AD:03:A5:69:81:D7:3E:56:5E:13:E8:BB:F4
            X509v3 Authority Key Identifier:
                keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:e9:f2:91:00:74:ef:5b:a6:74:82:74:ae:22:a3:e2:0b:
         e1:97:84:72:7d:5b:37:90:74:91:9c:ea:9c:5d:c2:a3:35:26:
         71:b1:e4:88:70:f4:c6:60:66:c1:e1:ce:54:f8:ea:fa:01:e4:
         a2:2a:e0:bc:bd:ef:a9:cf:4b:c0:45:eb:d8:2b:63:df:08:ce:
         c6:0c:82:6e:ec:fc:c4:d5:b5:22:14:23:d0:d7:a0:52:0b:0c:
         3d:e3:7e:42:f2:9c:40:61:68:6b:b1:10:c8:59:2e:a1:f6:eb:
         9c:ff:d9:d7:44:d3:cb:82:aa:cc:9d:0a:65:c8:9b:85:bc:0a:
         ca:d1:8b:5d:b0:3f:a5:49:ef:67:70:e8:19:e8:86:38:e0:67:
         c6:c8:2d:29:55:14:9d:22:5e:f2:d5:8c:3c:ed:43:06:52:c7:
         10:37:dd:a1:cd:17:d4:bc:57:8f:3b:70:45:5e:3f:47:77:ad:
         a8:6f:f4:7d:74:c1:a6:37:cd:9d:51:d2:9a:d5:43:4c:f3:3e:
         74:31:66:fd:2f:23:bd:70:f6:ad:ab:15:9f:ee:f6:c2:1f:1b:
         84:57:32:1b:fc:91:3b:2e:0a:41:11:62:f9:f7:1b:dd:91:8d:
         00:76:f6:9c:3d:34:58:a9:0d:ab:3f:bb:71:0a:80:37:05:4b:
         df:51:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----