Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File:                     DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier:          Aa/51vlxO/rGeppkVsKCGTjDoXj4Vc3S6gW/Rw5gmUU=
Subject key identifier:   8F:E6:12:A6:08:2E:78:66:D9:C2:DD:CB:A9:5F:54:3E:71:B2:A1:08
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer:       /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial:       01962DF3ED44A22C7DA729243DC33CD620EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number:          046C
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: 7iwIA+rPjMZIskQnU4wfzLYbyxuIiJ+acC7ZqCsy1r0=)
                          2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:44:a2:2c:7d:a7:29:24:3d:c3:3c:d6:20:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=8fe612a6082e7866d9c2ddcba95f543e71b2a108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:ca:59:ff:1a:a5:bb:eb:d3:79:03:61:97:
                    32:a9:a7:24:8e:07:d8:eb:16:0b:5a:78:10:8b:51:
                    bd:37:32:84:7d:5e:ac:8f:ad:b7:d2:c5:ab:af:f2:
                    43:1e:ea:9d:0f:97:70:e7:fa:07:23:f3:1a:3e:cc:
                    2f:c0:2a:07:22:0e:cb:a4:8e:5a:f5:12:5f:8a:be:
                    59:7d:fc:b2:7e:0e:19:d5:8f:91:8c:65:51:96:d2:
                    ce:a0:d8:7c:02:89:ab:77:b1:df:ff:d1:c8:d0:b5:
                    a6:e8:f4:dc:85:c8:45:e2:34:2b:db:66:25:c3:ce:
                    ee:b7:92:af:03:31:93:c4:85:71:f9:bf:19:e9:f0:
                    9e:d8:62:17:e8:e2:81:ce:18:b2:a9:f3:27:96:ea:
                    21:d8:62:a6:d9:7b:bb:6b:6f:13:ee:25:54:16:da:
                    fd:96:eb:e6:01:7b:9f:6a:20:bb:97:37:8a:23:49:
                    18:d8:bb:94:8e:38:d5:a4:b7:17:46:07:b8:4a:96:
                    78:40:f4:81:7d:d5:f8:85:fb:2c:1f:10:a5:f6:de:
                    13:69:f5:af:9f:a0:5f:cf:53:f0:52:a5:c7:20:d7:
                    bd:c6:9d:ab:6f:30:3b:68:67:29:25:e8:b6:e9:86:
                    88:00:95:ab:03:a6:eb:78:20:20:06:3e:d9:46:e1:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E6:12:A6:08:2E:78:66:D9:C2:DD:CB:A9:5F:54:3E:71:B2:A1:08
            X509v3 Authority Key Identifier:
                keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e0:04:8f:16:5e:8f:d2:29:5a:f6:06:ee:b7:81:1d:be:d5:
         eb:f4:4d:55:e8:60:8a:66:63:a1:9b:2a:40:40:48:20:c5:a0:
         e1:f8:cc:57:7a:b0:6a:48:14:00:e5:a3:c1:73:b0:4a:c7:c6:
         d0:8f:6f:4f:91:23:25:fa:e5:d9:d5:ac:ca:06:c5:fb:0f:b7:
         c9:58:78:3f:21:ed:2b:2d:a4:f9:61:99:b4:48:13:11:36:f4:
         ee:3b:81:32:6c:69:1d:55:bb:4e:32:ba:4b:40:47:af:f3:52:
         9e:f6:01:e9:ae:71:aa:e3:cc:28:54:c8:58:c1:c5:ae:f6:5e:
         e3:62:21:82:89:43:16:8d:e0:e7:ce:69:37:c4:15:59:b3:f3:
         5f:8b:d8:d5:f7:d8:30:58:49:6a:fe:8f:60:1d:7b:25:39:2b:
         12:62:e7:16:63:e2:e0:0f:a6:81:f7:c6:ce:80:21:0b:dd:14:
         6b:1c:e2:7f:5a:5b:05:af:3a:3b:0e:61:f9:24:35:26:87:5d:
         8a:37:2b:b7:78:86:3e:48:41:b5:38:8d:ed:2a:a7:3a:10:bf:
         6f:45:a1:34:3f:12:75:78:f7:20:b3:59:88:c4:cd:3b:f4:d8:
         8c:1b:f2:90:86:32:f3:56:17:d3:e3:be:50:2f:fe:d2:74:96:
         76:12:4f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+1Eoix9pykkPcM81iDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzMxZTc0N2FkZDM4MjkyNWQ2Y2EwZGIyMmE0ZGFhZWFh
MmQ2MWYwHhcNMjUwNDEzMDcwMTIyWhcNMjUwNDE0MDcwMTIyWjAzMTEwLwYDVQQD
Eyg4ZmU2MTJhNjA4MmU3ODY2ZDljMmRkY2JhOTVmNTQzZTcxYjJhMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHbKWf8apbvr03kDYZcyqackjgfY
6xYLWngQi1G9NzKEfV6sj6230sWrr/JDHuqdD5dw5/oHI/MaPswvwCoHIg7LpI5a
9RJfir5Zffyyfg4Z1Y+RjGVRltLOoNh8Aomrd7Hf/9HI0LWm6PTchchF4jQr22Yl
w87ut5KvAzGTxIVx+b8Z6fCe2GIX6OKBzhiyqfMnluoh2GKm2Xu7a28T7iVUFtr9
luvmAXufaiC7lzeKI0kY2LuUjjjVpLcXRge4SpZ4QPSBfdX4hfssHxCl9t4TafWv
n6Bfz1PwUqXHINe9xp2rbzA7aGcpJei26YaIAJWrA6breCAgBj7ZRuFnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/mEqYILnhm2cLdy6lfVD5xsqEIMB8GA1UdIwQY
MBaAFA4zHnR63TgpJdbKDbIqTarqotYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUt
ODM0YjE0MzYyMzkyLzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUtODM0YjE0MzYyMzky
LzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeAEjxZe
j9IpWvYG7reBHb7V6/RNVehgimZjoZsqQEBIIMWg4fjMV3qwakgUAOWjwXOwSsfG
0I9vT5EjJfrl2dWsygbF+w+3yVh4PyHtKy2k+WGZtEgTETb07juBMmxpHVW7TjK6
S0BHr/NSnvYB6a5xquPMKFTIWMHFrvZe42IhgolDFo3g585pN8QVWbPzX4vY1ffY
MFhJav6PYB17JTkrEmLnFmPi4A+mgffGzoAhC90Uaxzif1pbBa86Ow5h+SQ1Jodd
ijcrt3iGPkhBtTiN7SqnOhC/b0WhND8SdXj3ILNZiMTNO/TYjBvykIYy81YX0+O+
UC/+0nSWdhJPMQ==
-----END CERTIFICATE-----