Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File:                     DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier:          2VMGZNH9BkYYi5XB59R+ER54CrEcXtICUyhA8N/zwew=
Subject key identifier:   17:85:55:15:C8:78:23:C6:B5:50:55:E5:D7:B8:8F:C0:3F:07:A4:70
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer:       /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial:       01962F063C93F57D7CCD99288B8AF9DB8AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number:          0AFE
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: 8//B0vVCSonGLZevzVHNGuHoP7+n69mb629/DV7sDgI=)
                          2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:93:f5:7d:7c:cd:99:28:8b:8a:f9:db:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=17855515c87823c6b55055e5d7b88fc03f07a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:18:32:95:73:98:4c:57:9d:f0:b3:d0:2d:
                    62:15:a1:e5:02:67:4d:08:21:02:07:74:60:79:ac:
                    78:b2:6a:b2:06:66:ba:ff:b4:fb:07:64:11:b9:19:
                    e6:52:1b:e8:dc:d5:8a:fb:a0:4d:db:af:54:53:76:
                    6c:bb:0c:1e:29:84:3c:ac:89:84:d4:4c:5b:77:ea:
                    81:f5:29:89:f4:44:4f:0e:6b:ba:1b:cc:ff:b0:1e:
                    45:d0:66:24:33:dc:3a:f0:9c:0e:d7:6f:4a:df:98:
                    a3:7b:ea:db:3e:4d:0f:99:0b:13:67:e0:ee:76:98:
                    3f:1e:6b:25:bd:5a:43:0b:fe:89:95:b7:c6:d1:68:
                    1f:9b:29:fb:61:25:7e:79:ac:72:cd:47:b3:44:9a:
                    d7:15:2b:64:6a:8a:4d:2b:42:e0:b5:da:ea:59:38:
                    44:bc:2a:b2:11:69:fd:1f:66:95:6e:8a:c0:5e:18:
                    60:84:da:12:37:33:cb:d7:fa:0f:8e:47:60:41:ba:
                    f4:a6:bc:51:11:5c:a1:17:d4:a7:1f:1f:ef:7f:f5:
                    94:af:db:d8:2f:b0:24:23:b5:12:06:56:ce:ad:6f:
                    97:14:f6:ae:73:be:4f:10:1d:43:a6:54:ef:4e:e4:
                    99:c9:72:ff:23:ff:84:3d:3e:25:49:55:bd:23:71:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:55:15:C8:78:23:C6:B5:50:55:E5:D7:B8:8F:C0:3F:07:A4:70
            X509v3 Authority Key Identifier:
                keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:ff:5c:ef:61:3f:15:92:d6:ac:3d:9f:79:d0:63:01:00:
         1b:89:c7:d3:06:7a:dc:46:50:fd:08:5c:d9:81:ec:6e:21:a4:
         da:8f:fb:ca:fe:cf:1c:1a:14:56:91:f6:56:e7:23:4c:2e:2c:
         37:71:dd:c6:b8:34:38:b7:b4:57:b3:0e:ad:8b:0e:7d:2b:1d:
         7c:74:0b:2b:5d:ba:62:15:2d:bb:01:23:8e:94:44:cc:59:7f:
         69:0d:79:8c:6d:25:f1:91:12:2f:3d:94:b0:ad:5c:f1:78:37:
         aa:65:1c:34:46:4d:d3:48:d7:69:3b:7f:ce:b7:3e:b2:73:66:
         f3:1b:48:e2:b7:48:18:cc:c0:d0:d4:1a:80:3e:fc:82:ef:11:
         39:1d:09:87:38:5d:8c:8a:8b:5b:61:c9:b8:ef:5d:21:64:dd:
         b3:be:a3:cc:72:3f:e5:8e:3f:3d:f3:83:09:cf:7c:9c:bd:cf:
         0e:bb:1a:37:de:9f:9d:5e:9b:1e:08:25:74:2d:22:65:bc:29:
         68:63:9e:d8:ff:6d:c8:d0:38:0f:9f:0b:94:7e:4a:8f:2b:77:
         e5:66:e6:04:12:22:f3:5c:b6:2f:16:a2:dd:47:aa:98:85:ff:
         a2:f2:be:f7:94:77:c1:9b:6d:60:97:10:50:fb:95:09:e4:05:
         c6:e2:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----