Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File:                     0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier:          ysgk+YSrKYZ85W96Z3wWQnoiTV2B1lsVy63VIylRTWw=
Subject key identifier:   6B:22:86:85:EB:1A:F6:35:B8:FE:81:81:34:A4:AB:8D:C6:6F:87:C1
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer:       /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial:       01962DF3AA75F26C15A3F800C1CDA2A38105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number:          0A61
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: SpKaEHuPpDUtvcgDgPfSQV/9Sb7oAVT6elV7LU4qrfg=)
                          2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:aa:75:f2:6c:15:a3:f8:00:c1:cd:a2:a3:81:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=6b228685eb1af635b8fe818134a4ab8dc66f87c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:09:3d:17:ce:e7:dd:d4:41:14:a4:89:ad:
                    66:f6:d2:50:60:e5:a1:c4:c0:08:63:ae:27:19:f0:
                    5b:10:7e:7a:71:35:62:57:11:82:d3:37:c0:18:29:
                    22:d0:27:f7:cc:8d:19:19:9e:f0:d7:ab:f9:ba:72:
                    5f:97:f4:a4:31:70:06:f1:10:4c:23:60:f3:3d:1f:
                    1e:39:ea:d1:22:0d:e3:e6:48:70:22:34:0d:cb:f3:
                    57:c4:4e:08:3f:d7:85:11:06:45:49:ae:a7:0d:68:
                    a7:2d:f1:45:bc:33:54:8e:14:cc:86:40:ae:1c:98:
                    57:ae:b3:5c:7b:da:86:70:d5:29:ee:be:99:02:81:
                    23:f4:fa:61:57:c2:9c:8b:d5:53:cd:94:8e:5b:ab:
                    71:37:0a:88:7a:31:b8:86:1d:87:a0:ed:43:6c:73:
                    af:29:e6:b1:60:e8:46:bf:37:6f:e8:74:6b:45:22:
                    01:a4:c4:ec:e2:3a:89:c9:01:97:8a:ce:92:bb:08:
                    35:0a:77:4c:48:6d:f0:c7:02:01:7f:2e:1f:19:ec:
                    3f:79:31:9d:69:40:d2:18:26:89:5f:cf:17:78:00:
                    ed:4c:7d:e7:28:e3:f9:16:af:0f:d8:1b:94:bc:3a:
                    8f:9d:75:22:8a:c8:fd:3b:79:6a:f5:07:4a:bd:25:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:22:86:85:EB:1A:F6:35:B8:FE:81:81:34:A4:AB:8D:C6:6F:87:C1
            X509v3 Authority Key Identifier:
                keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:df:b3:1d:45:3b:df:6a:34:e3:ec:85:78:e0:62:89:40:
         5a:1a:e6:a0:ad:c9:e3:b5:b0:1c:18:74:e1:a3:01:95:b2:4e:
         ba:19:ef:21:43:b3:9c:c9:37:25:35:24:1d:86:c3:c5:c8:07:
         e8:31:52:15:16:7a:6c:02:27:6d:79:c4:6a:9b:43:4a:b5:c0:
         35:d4:00:8b:e8:3b:8c:2c:b0:8d:78:6b:48:0a:f5:70:c9:18:
         37:f9:60:d3:b0:58:81:88:81:8d:6d:70:02:6b:34:8d:ce:7d:
         f1:01:45:c0:75:e8:f1:ef:64:3c:72:97:8a:1d:d7:7b:d8:24:
         76:43:a8:77:19:2f:fa:a8:8a:d5:3f:ee:0a:8f:3f:43:bb:41:
         c7:f8:35:69:13:09:3b:3d:eb:fd:31:63:c2:c6:87:44:34:3e:
         db:5a:7a:47:56:21:e1:93:5f:db:ee:4a:02:59:d5:52:99:04:
         6d:9a:4e:ad:15:b8:fb:6b:0c:32:de:95:ec:9c:3b:4a:8d:d9:
         e9:fe:62:84:ab:99:68:ba:85:a1:c4:9c:70:4c:2a:33:9f:f5:
         79:eb:bb:24:f0:d0:b3:4a:68:4e:d7:f4:b0:25:ff:22:f5:f1:
         f2:9c:a1:0d:d8:3f:1e:e7:d7:00:5a:75:1a:ea:d9:7e:e9:e1:
         9c:e5:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----