Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          gGQK+GDsjsIUNHsVp1a54FpeuYcywRqOJ1IX7fmZTCU=
Subject key identifier:   CA:C8:66:A9:BD:78:78:3E:10:77:5D:47:6F:7A:0F:9D:37:2B:C8:1F
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       01962E2B4ACACDD343B1251F7F32B7D61967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          D7
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: aMiSG2GcC9Ooe9cPEL146keeb+XJk6Zg2E7oWURDmjo=)
                          2: RgoujS8tNzc1trUClXjXdgm9GW4.roa (hash: ssh990VYVMLkS9OzvQXonmU08pFpUGjRLMlpdq2MiNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4a:ca:cd:d3:43:b1:25:1f:7f:32:b7:d6:19:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=cac866a9bd78783e10775d476f7a0f9d372bc81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:a5:4b:d2:a6:f4:7a:7e:40:27:cc:cc:f4:
                    99:05:68:ac:b0:81:55:27:be:c2:ff:cf:09:aa:f5:
                    4c:1d:fd:61:85:76:96:5f:7b:b3:22:da:5b:26:96:
                    38:59:ac:5f:7b:cd:8a:55:87:77:76:14:f7:ba:69:
                    79:26:63:fe:67:3f:c1:7a:0b:ec:e4:67:0c:e7:d9:
                    45:3c:05:c0:f3:df:6d:67:94:19:24:c5:b3:d6:75:
                    a5:bc:e8:9b:7d:1f:a8:45:78:18:5f:49:2a:60:ff:
                    c8:42:c1:71:39:1c:a8:a0:2a:e6:88:a0:1b:f7:8d:
                    29:2f:3f:0a:61:b6:4c:be:f3:ad:92:59:e8:77:68:
                    ab:14:c6:be:aa:51:63:25:b6:99:41:78:07:94:bf:
                    db:f6:2e:07:d4:66:5b:b5:29:b0:0f:14:83:db:fb:
                    e7:6a:4f:1a:f2:1f:5b:05:6c:04:a7:65:ef:b7:1c:
                    1a:a4:f4:c7:2b:fc:81:10:1b:a4:fe:5f:89:dd:20:
                    b0:a6:85:9c:6d:61:20:7f:fb:66:f5:62:2b:dc:5e:
                    c1:d1:16:bf:a5:a1:ad:a2:cb:27:cc:ec:89:51:77:
                    04:11:18:ae:20:f2:9a:39:84:5b:23:54:8a:35:e6:
                    6d:27:6e:90:cd:1c:d3:53:dc:bd:0b:ee:d3:8c:7f:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C8:66:A9:BD:78:78:3E:10:77:5D:47:6F:7A:0F:9D:37:2B:C8:1F
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:36:e1:2f:9c:07:4c:00:e0:01:a7:31:4a:b3:61:0f:73:23:
         bc:d9:40:00:f7:14:d4:bf:ed:bf:3b:10:e8:22:45:df:51:db:
         17:38:ae:62:33:3e:cf:72:e6:5a:42:04:e9:e3:1c:f6:bc:1c:
         65:a6:47:0d:0c:7c:29:65:11:4b:2d:65:33:c9:f5:33:61:36:
         59:d0:07:41:07:d0:2d:4c:c6:55:49:90:3e:65:c3:c9:7e:b7:
         57:83:93:7b:b9:42:c8:1f:fb:7d:86:7c:d0:13:42:d3:77:7d:
         eb:97:66:d9:63:32:92:19:62:22:f2:a6:41:68:b3:cf:65:6a:
         5e:32:58:78:8f:fd:96:11:66:b4:d7:15:c4:a7:74:f5:98:12:
         a2:2a:47:3d:d0:a8:95:b3:a5:a7:12:96:ab:65:03:f9:18:63:
         12:1b:19:b8:11:87:f6:eb:97:53:bd:b7:2d:a6:6d:61:0f:ff:
         e0:80:7d:cf:7a:0c:0d:5b:25:ed:1c:b7:ee:ae:39:9a:77:d8:
         b2:f4:bd:3d:8f:e5:83:05:ae:82:f3:5b:82:63:ce:54:3a:cd:
         ba:bb:5a:5b:4b:a1:32:70:33:a7:af:1b:ba:2b:0f:57:a8:f8:
         7b:6d:37:da:d8:16:29:bb:ed:58:1b:bb:7a:64:f1:3b:04:41:
         cc:28:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----