Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          v9jgTy9QluwjounK3NuhQtyOhv/NKCxaYw73C3BfcQ8=
Subject key identifier:   A5:95:50:9F:BE:0F:78:EB:94:4B:0B:C9:77:AE:91:C8:B6:19:5C:A3
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       01962E98E81E437676685B58D3A763BCCD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: 79T0bF1ztQIAH5lgxz9jHu4kTP+KGmXjRGwCJBj+b1A=)
                          2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e8:1e:43:76:76:68:5b:58:d3:a7:63:bc:cd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=a595509fbe0f78eb944b0bc977ae91c8b6195ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:65:55:e7:6a:b3:14:9c:92:a9:28:a5:26:
                    1f:a3:bd:f8:16:24:5b:96:33:b7:e7:9d:6b:14:11:
                    b3:73:19:ef:88:14:80:d8:e7:b1:fd:07:a0:af:16:
                    c0:2e:be:ec:e3:dd:ba:e5:9e:54:c7:b1:55:82:88:
                    80:f3:9f:8a:7f:fe:36:13:1e:26:d7:49:39:19:6a:
                    79:ab:9d:17:15:9c:2f:9c:7b:c2:ca:61:c7:f6:50:
                    0c:18:b2:23:16:bb:86:49:d9:ec:57:57:ad:47:ce:
                    50:3f:e4:b8:4d:a3:b5:90:ef:d9:5f:50:2b:1e:5a:
                    db:31:dc:4d:43:9d:81:b1:84:29:7e:eb:89:68:64:
                    c7:0a:57:4a:e3:af:19:b9:33:ad:df:26:da:78:a4:
                    6f:ee:62:78:12:62:b6:4c:8c:93:b1:2e:b9:97:f5:
                    ca:75:1d:f5:b8:f6:a7:39:23:ee:7b:58:fd:32:08:
                    02:a1:b6:8c:62:08:5e:4a:c6:81:db:ec:d8:c1:c8:
                    72:7c:fd:1e:04:3f:cc:f6:2a:47:d8:1d:af:a6:f4:
                    82:8f:ef:d2:df:40:8e:ea:ed:9b:e6:6c:b6:fd:70:
                    94:a0:18:27:7a:d5:c0:d5:07:e0:fc:98:de:82:f5:
                    2d:07:31:ee:f9:48:eb:60:0f:d2:fd:27:90:61:8c:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:50:9F:BE:0F:78:EB:94:4B:0B:C9:77:AE:91:C8:B6:19:5C:A3
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:c6:89:29:f2:ea:7a:1b:47:f8:64:c9:6b:b8:dc:a0:b0:
         23:50:09:45:e9:e4:84:39:f1:b3:00:5d:e1:aa:b0:13:a1:08:
         82:8f:b0:20:9b:37:7f:33:35:34:37:d8:3b:ac:56:8d:36:55:
         e7:80:b9:57:e8:a0:c6:f4:ae:9e:89:fd:0d:8a:6e:82:7f:f5:
         2d:30:a8:79:3f:c2:04:5c:b1:f8:45:32:34:d8:85:12:4d:c6:
         2a:d4:87:38:71:8a:3e:04:15:f0:fa:62:87:a5:10:cd:d5:88:
         d0:39:3b:4a:45:4b:b6:fe:54:7b:c2:4e:2b:93:f7:80:bc:ce:
         74:c6:4a:cd:39:7a:66:1e:f3:c3:03:ba:ef:62:f5:cb:5f:90:
         43:b6:c4:ed:22:e5:10:e0:0f:d2:b2:2a:c4:08:ae:7e:28:43:
         c0:17:84:04:80:47:60:60:0d:95:8b:78:0d:14:3f:1e:db:7d:
         54:84:74:8d:35:35:0e:91:a6:dc:0e:32:15:c1:b4:1a:6b:07:
         80:bb:45:54:8d:26:64:fa:29:b4:d4:df:24:39:f2:93:f4:c5:
         cb:ae:97:ff:cb:f6:71:99:37:88:b9:15:63:19:c6:00:0b:9a:
         49:27:38:a4:9b:a2:49:28:75:ad:68:c1:3a:88:f2:55:d3:ad:
         c1:91:64:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----