Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File:                     Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier:          U3tEZTXg9QYH6v3F8dcs3jM36KEtr0uKHRD5b9y6Iso=
Subject key identifier:   34:BB:BC:7C:78:DE:BD:8A:FB:53:BC:27:C0:02:1F:A3:3A:9A:33:B2
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer:       /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial:       01962E2B0FA1C3DA7DE251FC838CD10A3697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: g34emQ3E6YEOe0KMYh2TVwayWDjwLtXJdPZaM2U3MbM=)
                          2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
                          3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:a1:c3:da:7d:e2:51:fc:83:8c:d1:0a:36:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=34bbbc7c78debd8afb53bc27c0021fa33a9a33b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:39:fc:01:53:37:d6:6d:11:44:ba:3b:53:
                    75:bb:7e:54:20:50:8e:6d:ce:61:2b:6c:2b:2d:d8:
                    79:4c:fe:2c:c1:93:05:81:af:40:21:2f:6f:66:3c:
                    a5:9b:97:f2:97:de:1a:e8:46:50:61:e5:f5:2e:61:
                    11:03:1d:a9:c5:08:49:94:72:c5:ed:a3:78:74:10:
                    07:2b:98:5f:d4:77:dd:37:ed:38:da:2d:3d:c4:55:
                    7e:58:88:04:77:b2:4b:14:5a:7c:11:4c:3c:e1:fc:
                    d4:87:a4:2d:5f:1c:58:80:79:35:87:f3:8e:86:08:
                    22:e5:4d:0e:f0:b0:17:e8:3c:de:e0:78:05:16:ff:
                    2f:80:e6:20:fc:6f:9b:40:03:ad:29:56:17:6d:6c:
                    cb:db:a2:29:de:3e:44:01:2a:50:d2:b9:4c:14:5f:
                    3a:69:d2:31:b0:5f:e1:56:6d:d0:2d:69:e1:aa:82:
                    02:4e:da:ac:3a:7c:5a:2a:7f:0a:72:76:75:88:7a:
                    ee:04:71:cc:ba:1b:b2:2d:33:10:3d:5c:7a:ea:d5:
                    1a:29:d1:8e:82:51:91:9a:b3:3a:4c:74:b9:ac:32:
                    02:d1:07:0e:97:33:73:5d:5d:05:61:9e:28:cf:f4:
                    29:3f:49:e1:ea:60:e9:78:a3:2b:4a:b2:48:b4:50:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:BC:7C:78:DE:BD:8A:FB:53:BC:27:C0:02:1F:A3:3A:9A:33:B2
            X509v3 Authority Key Identifier:
                keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:92:65:ce:f7:f4:1a:0c:b2:30:20:af:eb:86:0a:3d:23:37:
         1d:2c:95:96:99:0e:ff:ae:14:67:b6:00:9d:60:f5:8a:62:29:
         61:7e:c5:60:08:2b:36:ef:b0:6c:73:b3:72:19:5a:d6:bd:9c:
         2f:d9:12:7c:82:67:13:94:b6:c5:6b:9a:11:2d:4f:20:1b:c1:
         d1:27:cf:66:c7:d7:c6:39:12:95:89:f2:d3:86:d8:7c:09:0e:
         10:d6:18:f9:b2:ec:e3:65:17:a4:e1:c9:4d:ff:b3:2a:1f:fa:
         32:c6:f6:93:29:85:2b:30:21:e0:f9:e8:14:8d:4c:a4:f9:82:
         0d:98:8b:27:82:5e:cd:e2:a3:6c:37:2d:3b:70:4a:91:6b:02:
         f3:b8:d6:70:47:a7:03:9c:14:70:63:12:93:c6:c8:d1:a5:e3:
         f1:f9:53:e7:16:8f:7e:e8:83:88:48:2e:59:e5:f4:f8:33:31:
         3d:b3:d4:fe:1f:53:56:e6:cb:01:9e:9c:6d:cc:57:79:6b:2f:
         71:21:c6:ae:e1:4c:c4:9b:06:2b:98:e1:30:3c:08:7e:ff:88:
         b4:47:75:6f:0c:8d:16:38:8e:41:d1:0b:3b:47:2c:22:df:4e:
         59:0b:99:f0:ab:c8:15:54:27:98:80:e8:67:a8:d0:d6:8b:90:
         19:46:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----