Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File:                     4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier:          vlYbufd4pcgLW4b8UMu+ofz8k30YZJSnLKuCvaXu37A=
Subject key identifier:   1D:08:A8:9D:AB:B8:70:DF:3D:E3:ED:91:46:82:4D:85:1E:AF:66:B5
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer:       /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial:       01962E2B3EB1D5EC27C70B7041ED29C8D3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number:          7F
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: 6RKIWrJEyiiQ2yi35IAdbQb07q+JUVqLjfacpCFHZrk=)
                          2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:b1:d5:ec:27:c7:0b:70:41:ed:29:c8:d3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=1d08a89dabb870df3de3ed9146824d851eaf66b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:0e:a3:00:54:b1:de:14:06:c7:39:97:17:
                    84:a3:46:36:0a:f3:5b:2c:4f:2c:13:38:7e:11:f9:
                    39:c0:ec:bb:f1:33:97:9e:76:1b:fb:ae:7f:63:9b:
                    e3:1d:fd:bf:e2:b0:ab:4b:c2:79:cd:4d:37:43:d5:
                    23:fb:16:f1:04:1d:2e:ad:0d:f0:40:11:8e:56:bd:
                    7f:da:d4:50:90:6f:70:df:af:0a:c8:a4:53:8d:9f:
                    5b:76:d6:6d:8e:d2:bc:cf:a6:f2:ff:7e:d0:c6:1e:
                    40:b4:b7:75:cd:7c:de:c7:af:75:e8:e2:47:8f:aa:
                    40:12:a6:b5:fc:d9:4b:3d:ce:cd:36:5e:35:b6:82:
                    23:92:f8:65:41:c5:51:0a:e5:e6:20:87:74:7c:79:
                    67:24:92:e0:48:29:a7:8d:36:91:26:b6:fa:0c:49:
                    59:9b:3a:bf:f6:bb:64:c4:aa:de:83:1a:cd:c3:29:
                    28:f3:68:93:33:49:fe:86:74:9c:ce:97:46:c1:fb:
                    4f:45:8a:77:4a:a3:4f:c6:6b:e1:b1:5a:a9:22:79:
                    1d:4e:1d:73:26:8c:60:ba:44:c7:e9:1e:12:47:e3:
                    b9:c5:d0:f5:b2:9e:af:11:a1:8b:aa:51:85:7b:b4:
                    d6:9d:31:cb:8a:6c:fe:63:51:0f:40:15:e7:b8:49:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:A8:9D:AB:B8:70:DF:3D:E3:ED:91:46:82:4D:85:1E:AF:66:B5
            X509v3 Authority Key Identifier:
                keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:78:e3:4a:77:7b:a3:2f:bc:e0:86:bd:3d:b4:f1:58:6b:59:
         5b:ff:f9:c8:70:c5:ca:55:09:44:cd:93:f8:35:a5:71:8d:6d:
         c3:d0:17:8d:6b:e6:10:4a:cd:c1:eb:a2:25:d6:8b:03:ba:00:
         ad:d6:65:9d:e8:f5:65:a0:6a:78:aa:ae:28:fa:b7:48:af:d7:
         24:45:43:4e:78:37:80:1e:fd:7a:b6:fa:5c:68:ab:15:f1:79:
         9c:a3:f0:4a:a4:3d:75:c3:ae:8a:6b:2f:75:c5:89:f9:15:58:
         cb:16:3e:59:bf:9e:ce:93:3c:32:89:0b:ed:3c:eb:de:ba:a7:
         2f:c8:04:90:c8:05:ec:4a:27:f6:88:42:f8:9f:36:45:84:99:
         37:6b:78:8b:ea:30:e9:5a:dc:23:df:ad:54:76:0e:89:cd:74:
         32:08:17:5f:75:3a:10:d4:4c:7f:ff:6d:25:c3:c1:4b:5a:ed:
         5f:6a:8a:38:52:7c:66:1d:eb:08:b8:41:74:f5:92:19:8d:32:
         de:67:02:b2:a0:0c:79:09:e6:6a:ec:5c:59:c3:4b:f1:8d:f4:
         49:a5:05:0b:05:61:27:b4:32:fa:f6:b8:7d:3a:95:7f:4b:85:
         38:fb:b4:e5:6e:24:22:90:84:26:bc:22:07:80:db:8f:ed:da:
         94:eb:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----