Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          0oBiTl8mYsldPHivusu+ls8go6lweTA8O7q/2zdDmTE=
Subject key identifier:   D7:04:2D:BF:95:2C:FD:F8:8A:3A:8C:5D:A1:7B:C5:E9:3C:7D:E1:C2
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       01962F749153E9961D55ED5095F36600570C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: gT4uZeKNIFd9hQFSJ417BoqPdGCW5+QzwigEMMBtYSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:91:53:e9:96:1d:55:ed:50:95:f3:66:00:57:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=d7042dbf952cfdf88a3a8c5da17bc5e93c7de1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:5e:ac:0f:94:ca:a1:bd:5d:af:e3:4c:19:
                    63:9a:7e:a3:b8:41:08:f9:94:2a:c8:5a:03:d1:e5:
                    c8:e6:ce:39:01:24:3b:dc:01:4b:94:97:30:bb:2e:
                    8b:6d:dc:1d:9c:60:3c:bb:c6:ca:3d:2f:fb:1b:aa:
                    e9:5b:35:f9:42:b9:66:c1:08:26:c5:f1:0f:93:80:
                    3c:97:a4:8e:4c:2d:0b:2a:39:aa:1f:0e:10:7a:84:
                    fa:ed:a3:d8:1b:f8:06:ec:3d:4a:3a:6c:8a:c5:61:
                    53:37:e8:80:06:8d:12:43:03:bd:60:14:89:b7:31:
                    11:e6:aa:19:dd:ee:69:97:33:e8:f7:3b:4c:e9:e1:
                    7d:74:6c:22:9a:73:5d:ca:30:94:eb:75:ad:69:fc:
                    9b:50:9b:10:32:12:d3:47:f8:6c:b8:f9:07:c1:8b:
                    48:51:a5:fe:e2:ca:b7:c7:88:b3:52:ea:eb:9a:11:
                    fd:97:cd:fb:8e:7c:3a:71:ed:f1:54:8d:8f:90:79:
                    e8:f0:51:c5:7f:08:93:5e:5c:4b:05:a1:85:db:b8:
                    8f:e7:80:ce:60:72:7f:2d:01:38:a9:ba:13:00:b0:
                    c1:85:9b:bd:a7:15:fe:f0:d3:d4:6a:ce:02:4d:35:
                    ac:7a:fa:bd:8a:c5:28:3a:a0:5c:10:ed:26:ed:b5:
                    74:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:04:2D:BF:95:2C:FD:F8:8A:3A:8C:5D:A1:7B:C5:E9:3C:7D:E1:C2
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:73:d6:4a:f2:28:79:09:0a:48:6c:79:ca:0b:bd:21:25:
         61:78:1d:b2:6e:4c:ad:0d:8a:07:2c:22:79:b1:90:fa:a9:80:
         8e:3e:49:53:a3:c0:7d:ee:38:ec:3d:07:b7:2b:dc:7f:93:cb:
         04:5e:d3:94:c7:82:ad:39:a4:73:7b:f7:09:d4:e8:51:a0:c1:
         6a:4b:5a:16:31:db:c3:f3:91:3c:9e:c9:b6:09:26:df:d6:bf:
         32:33:68:7f:68:aa:1f:c5:c5:37:bf:ab:8f:21:50:22:6e:b0:
         7b:df:6e:e7:5f:50:ef:48:29:95:63:a7:ac:23:dd:8c:6e:6b:
         21:5a:ac:b0:8c:5f:c1:ae:e1:74:f4:31:41:54:7a:3f:13:61:
         ce:35:28:bf:ba:27:18:49:34:8c:8c:f8:66:bd:2c:cb:15:0b:
         73:fb:d6:0e:92:c4:db:84:7f:df:52:1f:1f:71:a1:d1:10:62:
         d3:be:2d:f5:70:44:06:cf:0c:a4:71:11:1f:6b:91:39:14:f7:
         b7:30:cb:8e:4f:a0:8d:93:82:cd:01:a6:e6:98:8b:4f:25:d4:
         e2:44:2c:86:ed:a3:e8:28:1b:c5:b3:ee:f7:c0:ce:b6:11:0e:
         bd:71:98:e1:6e:3c:62:a0:b1:eb:6c:de:a9:2b:68:dd:8b:fd:
         2f:a1:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----