Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File:                     DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier:          rd2wkdXaQ/m6bhEmxyFDL3CO80iUxC6cAczAaZwri00=
Subject key identifier:   56:D6:2A:8C:BA:19:B0:DC:D8:64:22:FC:56:2A:01:7C:B3:16:62:AF
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer:       /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial:       01962F06E2C76A4EAA15BFC37FA957AAB516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number:          031D
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: E5/h3whe9PDNFRAxsjbLe3Qy2YmCCCLQawBGwv8H6kE=)
                          2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e2:c7:6a:4e:aa:15:bf:c3:7f:a9:57:aa:b5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=56d62a8cba19b0dcd86422fc562a017cb31662af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:6b:3a:80:80:50:f7:2e:00:9d:d4:1b:31:
                    5a:08:be:a4:c0:f2:5f:9c:18:c6:69:cc:d7:d4:2a:
                    29:4a:2e:b1:cf:1e:f3:b7:c3:dd:25:3e:bb:b8:0c:
                    7b:9a:af:f8:d4:62:cc:d9:76:7b:64:0b:f1:dc:7d:
                    6b:46:8a:61:da:93:e7:e6:68:a8:30:5d:42:9e:9a:
                    46:97:9b:e7:39:55:6c:a5:1f:02:29:04:5b:ae:70:
                    91:44:72:a6:10:d6:17:a6:00:92:6d:b0:37:92:3e:
                    5e:23:be:d5:6e:b6:28:0f:39:56:bc:55:1f:5d:4b:
                    0d:a5:6c:57:65:52:54:cd:2c:03:65:e2:f9:29:ff:
                    35:7f:4f:8d:39:bd:f3:32:e4:67:db:c0:c4:81:d5:
                    e3:cd:96:4c:39:57:76:48:76:0b:59:ce:34:ea:73:
                    02:0e:63:06:74:0e:27:73:d2:ff:f2:cc:d5:20:c2:
                    37:b9:cb:3f:18:46:75:d6:be:23:fa:ad:a2:71:19:
                    cd:33:e5:83:4b:56:77:0d:ce:21:53:a4:b9:d8:56:
                    92:08:5c:6f:71:35:38:43:f2:5f:45:29:32:60:3c:
                    27:7a:3e:4f:d2:6f:81:37:26:03:ee:4e:db:56:46:
                    b7:3a:47:c6:78:ec:dc:63:48:a4:1e:53:db:09:9b:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:2A:8C:BA:19:B0:DC:D8:64:22:FC:56:2A:01:7C:B3:16:62:AF
            X509v3 Authority Key Identifier:
                keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:6e:a6:73:0a:4e:7b:e7:d5:dd:e1:03:12:24:5e:18:52:
         e9:fc:7a:72:e3:5a:eb:1c:f8:53:f7:22:c8:c9:fd:b3:e9:56:
         f9:55:cb:c5:10:28:57:b3:6a:d0:49:1d:f1:72:b6:39:f6:5e:
         ea:e7:5e:d9:ff:70:ce:28:89:a7:13:cf:aa:65:be:97:e1:31:
         a6:6d:ad:3b:23:7b:ad:82:00:18:f7:61:8a:18:a5:68:2e:bb:
         2b:c9:0c:cd:fb:f0:c4:0d:64:b3:21:66:cb:db:e5:ab:53:bb:
         65:88:8c:31:78:a0:15:2f:c6:21:cd:94:55:51:e9:2f:82:d5:
         d5:0c:6e:eb:f9:dd:00:57:cd:82:65:f8:68:a4:14:94:fa:80:
         8a:4d:58:99:5c:5c:62:75:a8:36:a1:f3:59:07:90:8d:27:c9:
         d4:71:6e:18:82:73:b7:bf:f4:9e:e2:10:e6:a3:33:10:ab:91:
         7d:cc:9a:f0:ae:50:53:06:60:4c:02:e5:29:cc:37:a9:23:8e:
         52:ab:5a:66:93:23:20:a1:71:2f:8d:47:6d:a1:d0:4e:c1:e2:
         a4:9c:9d:bd:52:c1:29:54:1d:14:c8:9c:d1:94:ca:0f:2c:46:
         e0:d3:c7:f6:27:cc:87:86:f7:be:47:69:1e:a4:13:e5:59:1b:
         5d:a1:5d:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuLHak6qFb/Df6lXqrUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDIyNDA4NjQ4N2VjODY2NmJhNjE1YzE1ZGM4ZjQ3OWRm
NmE0OGQwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
Eyg1NmQ2MmE4Y2JhMTliMGRjZDg2NDIyZmM1NjJhMDE3Y2IzMTY2MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqVrOoCAUPcuAJ3UGzFaCL6kwPJf
nBjGaczX1CopSi6xzx7zt8PdJT67uAx7mq/41GLM2XZ7ZAvx3H1rRoph2pPn5mio
MF1CnppGl5vnOVVspR8CKQRbrnCRRHKmENYXpgCSbbA3kj5eI77VbrYoDzlWvFUf
XUsNpWxXZVJUzSwDZeL5Kf81f0+NOb3zMuRn28DEgdXjzZZMOVd2SHYLWc406nMC
DmMGdA4nc9L/8szVIMI3ucs/GEZ11r4j+q2icRnNM+WDS1Z3Dc4hU6S52FaSCFxv
cTU4Q/JfRSkyYDwnej5P0m+BNyYD7k7bVka3OkfGeOzcY0ikHlPbCZvZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbWKoy6GbDc2GQi/FYqAXyzFmKvMB8GA1UdIwQY
MBaAFA3SJAhkh+yGZrphXBXcj0ed9qSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDkt
Mjk3MTgwMDc5NDIyLzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDktMjk3MTgwMDc5NDIy
LzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjN1upnMK
Tnvn1d3hAxIkXhhS6fx6cuNa6xz4U/ciyMn9s+lW+VXLxRAoV7Nq0Ekd8XK2OfZe
6ude2f9wziiJpxPPqmW+l+Expm2tOyN7rYIAGPdhihilaC67K8kMzfvwxA1ksyFm
y9vlq1O7ZYiMMXigFS/GIc2UVVHpL4LV1Qxu6/ndAFfNgmX4aKQUlPqAik1YmVxc
YnWoNqHzWQeQjSfJ1HFuGIJzt7/0nuIQ5qMzEKuRfcya8K5QUwZgTALlKcw3qSOO
UqtaZpMjIKFxL41HbaHQTsHipJydvVLBKVQdFMic0ZTKDyxG4NPH9ifMh4b3vkdp
HqQT5VkbXaFdYQ==
-----END CERTIFICATE-----