Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File:                     D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier:          grN2mEsiQRBh6d3rNX8CPYMTsZWVjvqCWh2mBkVHvgk=
Subject key identifier:   4A:DF:64:7F:36:FC:3C:D6:90:7A:97:8F:A1:2F:12:BF:22:7F:63:8B
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer:       /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial:       01962F74705987038E5029ABA1B46D27A86F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number:          045D
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: eYUWIW9Wjz0/vFm2ps2My3JdV/52rPF+2q1I3SbAqC8=)
                          2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:70:59:87:03:8e:50:29:ab:a1:b4:6d:27:a8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=4adf647f36fc3cd6907a978fa12f12bf227f638b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:d9:d7:c5:95:50:c3:e1:17:93:e6:b2:06:
                    07:9a:98:84:9d:04:79:da:9f:d5:62:c9:6b:2f:a1:
                    50:ec:1a:b6:ff:5d:9a:50:0b:90:76:97:c7:3d:03:
                    c1:f8:7c:73:ec:d7:c4:5c:fc:69:2d:c1:93:c4:f7:
                    dc:40:cd:d5:bc:7c:50:7f:b3:03:71:cd:62:91:79:
                    c1:b9:2c:a8:53:70:ed:6f:5e:ae:9e:08:46:91:6e:
                    a2:2a:09:a9:7f:05:db:1b:34:3e:96:9e:b3:06:fc:
                    5e:c2:d4:17:98:e3:af:73:db:e0:6a:22:97:0e:bd:
                    54:aa:19:4d:fd:d4:b6:3b:4f:13:03:86:d0:e8:1c:
                    b2:14:bb:1e:76:54:f8:aa:e8:4d:40:6c:56:46:13:
                    28:c8:37:9d:c0:ff:42:cf:68:a4:09:a8:4f:c0:f1:
                    aa:49:52:b7:d2:8a:91:65:a7:ab:0b:c3:7d:57:1f:
                    68:a0:88:24:1b:3d:4d:f3:83:e4:60:c6:b5:98:5f:
                    ea:23:3b:11:a1:f4:24:90:de:7f:3e:a6:bc:fa:34:
                    8c:27:cf:01:e4:cd:ae:79:18:5d:d9:6c:db:d5:33:
                    30:37:d2:93:65:2f:71:f7:a1:9d:d5:e7:a2:55:4e:
                    fa:1a:ce:bf:d1:6d:51:b4:ca:fe:18:0b:64:b3:3d:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:64:7F:36:FC:3C:D6:90:7A:97:8F:A1:2F:12:BF:22:7F:63:8B
            X509v3 Authority Key Identifier:
                keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:52:e7:d9:41:32:78:ab:a4:09:bd:c9:29:c5:1f:a2:58:
         8e:0f:23:7d:fa:04:70:8e:4f:c5:b9:93:12:34:be:74:cb:35:
         c8:88:e9:c7:8f:60:86:5b:2e:b0:c9:0c:04:de:19:95:44:6a:
         e7:7d:89:69:b1:67:f5:d5:3b:88:42:21:d3:c7:06:5e:d0:1a:
         75:5c:89:dd:fe:91:94:27:fa:03:12:4a:82:62:ae:65:c1:a6:
         1d:75:d6:ab:d6:0f:85:aa:2b:3c:76:39:45:55:69:db:b9:bb:
         aa:d4:96:d7:42:1a:84:a8:bf:89:d6:67:57:75:a1:fc:c7:e3:
         1d:c8:8c:47:6a:36:37:0c:22:d4:2e:68:51:83:4f:97:41:4f:
         ee:3e:aa:02:04:46:ba:9f:eb:82:a5:65:6e:57:4a:cd:4a:bc:
         fc:53:93:f2:67:8b:fb:be:42:ce:de:45:4b:fa:30:ca:95:2b:
         8e:d8:c9:36:b5:8d:35:17:8f:ec:15:b7:77:3b:52:17:80:8e:
         52:15:a1:2f:4a:e3:d0:8c:44:32:1d:a3:3e:09:ac:8f:cc:f0:
         6a:b6:24:43:28:12:7f:8f:b2:71:a1:ec:d7:01:80:8e:91:bc:
         5e:a3:4b:08:04:a9:6c:a7:b2:92:a0:89:da:e9:fe:c0:e0:ef:
         43:cc:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----