Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          KM9Z7gwbct/LJX1yYAUNU+tbCTo9EuY54GnGGdkdMMc=
Subject key identifier:   43:B1:68:3D:BB:9E:6F:F1:43:EC:D6:26:C4:AB:91:1A:55:1B:64:4B
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       01962F06B2A792952F8EF016D20B2EBB5F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: 6FBWUzCFwr3Xes4Em8LOYse2AYPGG7Z7elGUGngQ4Fo=)
                          2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:a7:92:95:2f:8e:f0:16:d2:0b:2e:bb:5f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=43b1683dbb9e6ff143ecd626c4ab911a551b644b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:97:63:f2:59:63:2e:66:eb:00:42:de:ab:
                    03:18:0e:58:b3:c0:7b:37:8d:18:c6:10:d6:53:39:
                    65:55:ce:32:46:f3:78:d4:7b:09:2d:bd:5b:58:68:
                    69:79:91:2c:4c:13:2a:7f:39:32:ee:c7:35:f8:a1:
                    ee:35:ac:0c:3e:bb:32:1e:00:96:a5:96:bf:59:e0:
                    63:48:dc:9b:6c:5a:76:ac:23:4d:9c:a0:8c:8a:a4:
                    2f:80:0b:e6:89:9d:e7:50:19:eb:1d:8b:bd:f4:21:
                    9e:1f:34:e5:8f:88:52:b7:7b:65:0b:c4:66:b0:37:
                    4b:f9:aa:50:9e:c4:ea:8c:9e:c7:34:a1:2e:36:a7:
                    a9:47:27:29:1c:78:8d:91:a4:59:c9:b5:ae:39:47:
                    00:78:ca:31:c0:38:45:f6:07:dd:b4:f2:5b:3c:29:
                    4e:e5:37:f4:66:a6:bc:c3:dd:0b:0a:ed:c8:90:0e:
                    46:25:b4:50:25:cd:12:b8:ae:a5:83:ec:c9:a4:a2:
                    f5:bf:66:11:19:8b:bb:0c:db:41:d0:89:a0:03:f1:
                    9f:3d:f9:05:b6:09:9a:87:23:33:af:9f:33:b3:12:
                    0a:34:6d:ec:c1:22:25:08:f9:af:91:87:46:2e:20:
                    4a:02:be:80:b2:0d:34:56:d9:17:b5:d7:84:49:83:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B1:68:3D:BB:9E:6F:F1:43:EC:D6:26:C4:AB:91:1A:55:1B:64:4B
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:d2:57:f2:cc:df:73:25:46:d2:11:22:85:27:98:99:4d:
         a6:63:46:48:3d:66:4f:33:d2:c2:c9:61:79:29:bf:95:c9:9f:
         60:86:c3:29:db:88:3c:d4:64:cf:db:e1:de:35:ee:2b:fc:a0:
         f8:ed:2a:3a:7f:e2:35:16:76:35:60:e0:ce:88:e5:bf:f1:8e:
         2a:8b:99:ef:e6:7b:e3:f6:dc:5e:08:1e:9b:06:2c:44:01:cb:
         99:8e:75:bd:a9:96:7a:dd:dd:8d:b7:a1:0f:5f:70:74:e2:2b:
         5e:a9:57:13:0b:c9:50:84:bd:3d:09:d9:d7:79:b9:4a:91:ef:
         54:6c:92:6d:68:2d:cb:41:c2:d8:76:eb:c3:60:91:b5:e8:04:
         3c:5f:f6:c4:47:7a:7a:df:08:8b:bd:1d:79:25:89:d4:ad:44:
         a4:e2:26:6c:5e:29:1a:03:f8:80:02:77:47:62:b1:79:84:fd:
         7c:80:3b:44:ea:2a:0f:fa:f8:a4:fd:63:1e:c5:d0:9b:ae:52:
         8c:c2:ab:8b:bd:8d:4e:be:ed:8f:cc:71:b3:68:bf:3e:73:3f:
         fa:a0:cf:2f:ea:ef:9a:35:a6:27:8b:35:06:8b:1b:fb:28:2a:
         71:42:16:48:91:c3:09:fd:47:3f:b5:bc:b0:a0:0d:d5:ec:44:
         3f:55:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----