Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          CaY12D4m4pjOuEhjaXerXuMIgISzxtxYH+a7EAvlrGk=
Subject key identifier:   52:BC:76:6C:DD:3E:FA:66:B3:D0:7B:04:B9:18:F5:8B:1A:E5:6E:D4
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       01962FAB3D4D54F6E5B4175E1B49B8440B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0938
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: nesZQTHn6x0y57EFC8YiY54tHZl683j7HeSIRBPsaLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:4d:54:f6:e5:b4:17:5e:1b:49:b8:44:0b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=52bc766cdd3efa66b3d07b04b918f58b1ae56ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:a6:3c:b3:04:0c:ee:7a:dc:3e:6e:25:67:
                    74:e0:ed:54:7a:c2:ad:d8:66:72:c6:6e:52:f8:20:
                    ff:03:f7:36:dc:11:c2:0f:56:54:74:aa:9c:81:59:
                    82:60:3f:b9:c9:9e:df:5b:a2:b0:50:3e:ff:5c:34:
                    8a:e6:03:cc:5b:0f:d4:6f:91:6b:4a:da:87:c3:c1:
                    3c:ba:a1:47:ae:28:70:09:7a:2f:38:a8:da:4e:50:
                    d5:e5:ba:4f:34:e6:54:9e:cc:c6:bc:01:90:db:b4:
                    12:7b:e8:0d:97:87:30:22:d2:e7:42:5d:fb:f3:15:
                    80:e7:75:fa:fa:64:52:87:71:91:5c:0b:8a:86:cb:
                    ad:11:f4:dd:54:d0:15:9a:8a:3f:f8:09:b8:94:6c:
                    0c:33:9d:fa:0a:ce:50:ec:37:b1:22:c4:d9:92:c0:
                    64:f5:b2:af:5a:f3:3c:51:3c:26:6f:19:f5:84:0d:
                    e3:15:6a:83:92:f1:a1:51:7b:5c:13:8e:cb:06:12:
                    e8:c0:9b:2e:49:08:76:57:12:57:18:58:c7:08:4b:
                    28:92:a5:d5:f1:7b:54:6a:e1:60:25:c5:40:6a:bf:
                    97:79:6f:f3:69:a2:02:49:61:78:92:2c:9a:55:83:
                    f0:fc:ee:5a:61:5d:08:de:9d:65:5f:44:90:c6:ee:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:76:6C:DD:3E:FA:66:B3:D0:7B:04:B9:18:F5:8B:1A:E5:6E:D4
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:36:9b:83:cf:28:4a:2e:72:a7:9f:ae:e6:4b:af:a8:c6:e3:
         8c:b8:7c:f8:8f:1d:a3:b2:23:06:4d:16:e0:60:38:81:2d:22:
         c8:e9:02:e6:af:d1:98:f5:57:62:bc:9f:a3:40:a8:94:fb:73:
         75:03:55:d7:9e:73:ef:21:5d:ce:5d:39:41:5d:14:8d:92:e4:
         fa:48:36:f3:ac:5d:19:49:d6:cc:b9:5e:cb:7c:54:88:90:c7:
         d2:3a:29:06:1f:f1:c2:d2:bd:a4:09:5a:3f:ff:4c:be:c3:83:
         93:51:bb:f5:90:f6:96:96:3e:69:97:ff:06:d8:ee:95:79:7c:
         89:a0:bc:0b:ed:44:7d:68:c3:65:bc:c8:34:ba:37:92:e5:e3:
         38:10:3d:6c:f8:0f:0a:83:ab:11:8d:da:6a:b9:1e:83:23:2f:
         91:b5:d8:9e:51:ce:59:67:81:a7:90:ad:ff:70:7f:2a:fe:59:
         aa:e5:36:03:a4:c1:6a:bf:85:13:b5:f9:15:f2:e0:67:e6:87:
         9c:ab:26:28:d3:cb:73:50:76:25:2a:e6:b7:fc:c4:37:b8:26:
         60:05:39:b1:66:81:60:c3:fa:24:c5:18:84:dd:cb:2d:c9:cf:
         2c:fd:70:10:52:14:a6:ca:9f:2c:d0:f8:98:b9:51:68:e7:5d:
         b1:28:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----