Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          KJ4yvBliPhHoSC5IODJLCHuh+n2OejblFaQrUD7aZi0=
Subject key identifier:   B2:69:D6:5D:58:7D:F9:A3:A7:14:90:A5:9A:8E:52:8E:C7:A6:8A:8A
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       01962ECFA48D34655DC3E70DBC0E873BCB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          0DF2
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: wOuefhzyAG7dMPjY0vm6rc0GaURq1o1SIEHJCtUNX4s=)
                          2: 1-bzPiIr4uKzM54SlrYIo7KhZ5GU.roa (hash: DDlYF6X7Zxo/Lw4zoc2BnAeUjIBMFJl/7uSpuLTlu7I=)
                          3: 3i-FLLqZNZBmwu1ImdXKMAXcINc.roa (hash: f5mig2xePHhIeW771WU5qz2mX8EgYaIQXzf9RtaIn7k=)
                          4: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
                          5: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
                          6: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
                          7: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
                          8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a4:8d:34:65:5d:c3:e7:0d:bc:0e:87:3b:cb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=b269d65d587df9a3a71490a59a8e528ec7a68a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:38:44:e3:a7:24:15:5c:38:7d:8e:55:66:
                    b5:da:86:a7:5d:0d:6b:1c:a6:1c:3c:d3:6c:d9:58:
                    28:45:1c:81:84:48:30:bd:1e:76:9a:e5:08:fc:7c:
                    76:75:17:58:98:ad:f2:da:c2:83:ce:80:31:c5:0f:
                    da:5d:3d:e6:39:65:ab:7f:ec:80:81:63:5a:8f:e2:
                    f1:19:7f:4e:a3:30:e3:13:50:4d:6a:8d:c8:92:2a:
                    ca:4d:22:55:67:f5:0f:d9:99:5a:12:94:c5:b1:eb:
                    4b:8f:17:b0:a1:e5:f2:33:b7:31:94:ab:83:1d:b9:
                    e0:a2:58:d5:33:b3:46:af:9d:12:0a:18:41:8a:78:
                    df:48:a2:49:e7:7d:e2:6c:fc:d4:cd:64:e4:32:08:
                    f8:80:cc:f0:8e:05:b7:1c:84:55:1e:5e:06:d0:f2:
                    b0:e5:27:2e:d5:e1:bd:15:42:01:ab:d8:90:4a:dd:
                    04:cc:34:42:80:ac:44:9b:e2:74:c4:e1:55:d6:36:
                    90:a9:6a:5e:16:80:6c:c5:b4:8c:4d:60:de:4e:59:
                    c2:1b:d0:1e:43:8f:d3:38:11:5b:e2:9a:2d:6b:3d:
                    f0:92:69:14:77:11:a1:fc:46:06:ee:de:b0:49:2f:
                    45:c5:81:8b:d0:b6:59:ed:32:54:b3:07:6e:07:b1:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:D6:5D:58:7D:F9:A3:A7:14:90:A5:9A:8E:52:8E:C7:A6:8A:8A
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:1c:13:24:95:0c:8a:1c:85:2c:85:39:04:49:78:9c:7f:
         79:cd:e7:a1:2b:53:26:04:b4:0c:a2:92:0b:d7:36:3d:b8:a1:
         0a:05:45:02:f5:74:05:c5:4a:22:f6:c9:e7:94:33:3c:b3:24:
         63:69:12:d1:a2:4a:85:3b:59:5e:3e:45:9d:1d:1d:3b:68:97:
         85:a2:3c:31:b3:47:34:4a:1b:16:dc:5a:8f:9f:b3:26:52:e7:
         91:96:79:9b:fb:8d:c8:5c:c8:ef:25:42:e8:ca:80:85:da:4f:
         2f:64:be:f1:8d:b0:ab:29:85:06:32:f8:0f:31:4d:f2:aa:bc:
         d6:77:df:dc:2c:14:77:e4:f3:ce:c4:ad:1b:2c:b5:1d:aa:ab:
         ab:a9:78:c8:30:d3:a1:95:9d:f7:21:4e:6f:0e:72:1a:db:61:
         56:43:21:3e:fe:74:76:a9:9c:81:11:95:56:8a:a2:4b:66:24:
         2e:06:bb:5b:f6:95:51:b4:b0:a5:60:72:e5:eb:eb:b0:cb:8e:
         08:a6:94:7a:fb:ec:88:ed:14:9e:ec:50:01:19:d5:6c:b1:69:
         6f:98:30:55:5d:77:06:87:2a:08:d4:56:85:b5:45:a5:fc:0e:
         6a:97:f6:3f:53:3e:c6:bf:dd:a7:34:e7:43:45:91:57:83:2e:
         64:32:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----