Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File:                     CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier:          sDbZ7yqj4GgaU+tN01D9O2Jo8MXRQVtYWc3aIY8SzDI=
Subject key identifier:   4F:CF:C3:37:1F:EC:AA:3B:96:2A:A6:57:07:E2:E3:6E:6A:95:3E:F3
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer:       /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial:       01962F070BB21CB47F1219C5631C7A057228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: /t8njZ8PmQ1iO185DOYxpc6crq7zhfQK23Sn4r5jrAk=)
                          2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0b:b2:1c:b4:7f:12:19:c5:63:1c:7a:05:72:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=4fcfc3371fecaa3b962aa65707e2e36e6a953ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e3:b5:cf:44:80:c2:99:e5:da:70:39:c0:e5:
                    7d:91:f0:9a:4d:ff:ae:26:34:4e:2a:63:c7:53:2d:
                    46:cd:42:cb:6b:c7:5a:d9:cc:31:e2:cd:8c:75:09:
                    04:85:08:8c:95:57:e3:7d:ba:32:48:7a:48:78:bc:
                    46:a0:0d:53:c0:6a:19:57:08:59:5f:19:c2:cc:2b:
                    ab:fc:01:59:78:1f:5b:28:9f:58:13:40:34:4d:b9:
                    c2:86:aa:79:4d:4e:dd:a1:83:01:13:d3:25:18:b4:
                    91:8d:d1:e8:5c:73:72:50:f3:6e:5d:4d:b6:ff:78:
                    24:ef:9e:ac:e9:39:8a:38:94:20:d1:03:4e:e7:14:
                    de:3b:d0:14:06:07:cb:75:da:9f:6e:38:6f:18:27:
                    67:8f:73:33:9b:bc:fa:fc:cb:8f:0d:25:6c:ee:a9:
                    4d:24:fc:fc:f2:84:3d:6d:17:38:7a:f0:5e:6b:7f:
                    01:49:97:15:91:73:91:50:b4:7e:f5:90:29:cb:7d:
                    40:b1:e0:37:65:c4:ff:29:ea:75:45:2e:f8:9e:eb:
                    21:23:22:75:79:ec:23:29:ce:5c:c0:1d:e0:46:6a:
                    12:7b:08:8f:d4:57:ff:e3:b0:8b:94:5d:37:35:19:
                    e8:51:65:cd:cc:28:1c:80:05:8e:02:66:6f:fe:d1:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:C3:37:1F:EC:AA:3B:96:2A:A6:57:07:E2:E3:6E:6A:95:3E:F3
            X509v3 Authority Key Identifier:
                keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:08:67:2a:a6:d2:20:a0:08:48:2c:4c:61:24:09:82:3a:81:
         29:b6:f2:23:df:9a:a7:b5:e1:ea:18:c1:21:c7:98:3f:97:1a:
         22:a0:34:a6:6c:08:d3:03:19:a6:ef:e4:f5:c8:64:11:ad:20:
         4b:35:50:ca:aa:99:06:ee:72:87:ee:95:46:1b:5a:0f:c4:91:
         86:76:a1:a6:68:05:79:8f:34:a1:6f:da:66:e2:1d:a1:de:83:
         b9:84:7c:c1:90:40:95:24:95:51:c3:48:76:9a:e3:82:85:57:
         7a:29:a3:f4:b0:ca:1d:31:f9:76:0d:80:9b:ff:1c:83:af:e5:
         e6:ee:ee:86:51:b9:c5:8d:8a:37:a2:15:a1:7f:9f:7e:67:60:
         95:8d:41:0a:42:37:33:2e:11:9e:d0:66:9d:cf:88:fc:24:c5:
         b3:02:3e:4f:6c:e6:f1:a6:61:14:31:6e:4c:b0:a3:78:35:09:
         3e:0c:ba:8c:10:af:be:e6:48:d6:3f:33:9c:b6:92:5a:fa:2f:
         0b:aa:2e:8b:6e:2f:67:71:7b:21:34:c6:c8:63:95:54:78:df:
         53:c8:8d:93:5f:3e:02:5f:af:ec:ed:fb:06:06:f2:ab:b4:c3:
         36:2a:2b:49:7f:8c:18:fa:64:35:3d:c7:92:5b:a9:ee:9d:cd:
         38:cd:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----