Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File:                     cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier:          dT+4ErQbprzD7mhqCKTn+q4ry9ux0/VV9w24lgwdcXM=
Subject key identifier:   2B:EC:E4:58:55:4A:D5:AC:2B:A7:AC:66:96:F1:9E:45:62:44:4B:34
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer:       /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial:       01962E98DF4106949EE28E33509753BD7EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number:          102E
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
                          2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: H/au00bZ8CDjsl2zZzA9f/D3mE8UdocrdrVE7OSowBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:41:06:94:9e:e2:8e:33:50:97:53:bd:7e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=2bece458554ad5ac2ba7ac6696f19e4562444b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:d3:79:ed:3b:ff:40:01:97:ac:fb:f5:57:
                    6c:f1:d2:bc:93:5c:c6:72:6f:9c:26:a0:ea:a0:87:
                    af:1c:81:c0:71:5f:ac:59:1d:d1:b7:70:e5:1f:5e:
                    d8:ef:4d:dd:c1:dd:7f:b7:ed:46:06:02:d8:f0:b2:
                    b4:d7:8e:b5:2e:fa:1c:6d:f5:69:eb:c9:d3:87:ac:
                    70:42:30:38:7d:37:b7:d2:a5:2e:e3:f3:0e:24:0c:
                    44:54:61:09:d1:46:75:82:57:d4:58:78:06:55:19:
                    a3:d1:64:1f:80:37:6f:76:af:84:f4:15:fc:78:79:
                    4f:70:b4:45:7e:90:16:b0:81:c1:99:66:2e:bc:9e:
                    d0:f7:f9:b4:23:b0:4e:a9:cd:fb:06:ec:1e:51:ba:
                    e4:c6:f5:d0:9c:27:1f:cf:43:13:51:f6:4f:6f:f2:
                    c8:1d:ad:c3:ef:1e:28:c1:01:e7:d4:d1:1c:0c:d9:
                    d5:28:a2:55:6d:f7:c1:19:c3:59:92:71:ab:ac:f9:
                    c4:74:c7:e6:cd:d9:1f:05:bd:81:07:5f:17:c3:ef:
                    a8:b2:2a:b1:81:dc:d0:db:2c:36:e6:4b:84:6b:6c:
                    d6:7f:ad:45:38:f3:a2:77:e8:7a:25:93:e8:6e:9b:
                    e6:13:d8:5f:f2:a2:e4:64:eb:2e:ef:66:c6:db:12:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EC:E4:58:55:4A:D5:AC:2B:A7:AC:66:96:F1:9E:45:62:44:4B:34
            X509v3 Authority Key Identifier:
                keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:73:99:96:11:72:16:29:e6:ea:65:29:81:67:a4:64:3f:
         50:50:d3:fc:7d:49:9c:f5:5a:02:1b:42:a3:84:36:da:e3:fe:
         37:34:a1:15:e1:90:76:5b:ad:0d:21:e3:8d:4f:dc:d6:19:34:
         de:4a:01:2d:8a:30:99:0f:5c:9e:8e:b3:8f:94:72:1c:49:82:
         3d:be:44:5b:5c:ff:e9:ae:0b:ed:3c:af:0f:6c:b3:bb:cf:ff:
         3b:38:f1:c2:cc:90:36:37:6f:88:0f:e3:e0:fa:37:ef:76:a1:
         74:47:f5:aa:85:bf:76:3e:ec:10:7c:55:bd:6e:c8:6c:e8:3b:
         55:ca:66:8e:fb:f9:94:fb:f7:89:0c:80:fd:b1:18:d0:11:cb:
         f9:91:2a:87:fc:a5:f4:14:47:a2:cb:72:c2:41:eb:04:32:fd:
         40:60:5c:9c:6e:4d:e9:c7:43:78:48:cf:0c:18:dd:4b:dd:75:
         42:2b:96:ff:47:9b:fb:ce:a1:b7:cc:d1:ac:e5:92:4b:73:a3:
         1e:c5:e7:27:4e:e7:1b:9a:3c:15:80:67:c7:67:37:a4:83:86:
         43:64:07:2d:a4:38:1c:37:73:c8:ba:bd:b6:ba:f0:c1:00:00:
         23:00:e4:92:ce:2b:ea:b3:7e:7e:cc:a5:82:24:71:ca:34:10:
         20:59:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----