Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          ldXrHgdPfNU3XuFSXdgKEfnN+2b41d3JVfq6UvvR9cY=
Subject key identifier:   7A:CD:61:06:AB:1D:90:AB:92:FB:E7:6B:E8:45:82:72:76:EF:35:01
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       01962F74D30633030C4C3EF8F4C203ECE55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: J4T3P/woGqx+a/HYxM6Y/3SYA5R5FwleI7hV9iZky0A=)
                          2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:06:33:03:0c:4c:3e:f8:f4:c2:03:ec:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=7acd6106ab1d90ab92fbe76be845827276ef3501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:ef:51:c2:4b:33:82:e8:7a:e1:43:e6:cf:
                    95:f6:67:6a:9d:30:4b:f4:cb:42:8e:59:37:cb:48:
                    3a:2f:1c:ee:85:a4:04:f9:fe:32:74:eb:04:5e:5c:
                    fb:95:39:13:b1:eb:0b:6c:14:4b:2b:cd:e7:f8:e7:
                    6f:90:1c:2e:42:0e:e2:92:c9:c1:fe:21:86:9a:6e:
                    6b:e8:28:ac:19:9a:46:56:5d:e0:a4:54:fa:95:e4:
                    16:76:45:4f:1e:83:5e:e1:82:63:42:d6:57:b0:e1:
                    34:ff:4c:0b:d2:59:e6:8f:29:f5:97:a7:dc:42:de:
                    77:42:86:57:3c:ec:9a:34:a8:43:dc:c9:ec:59:b4:
                    aa:a8:38:d7:8c:03:1f:40:7a:56:c7:12:ad:84:c4:
                    03:9e:b3:34:9f:e4:4f:3d:1f:de:45:f4:08:2f:9c:
                    6a:1e:e3:bf:1b:16:dc:28:57:93:e1:be:a5:9b:fc:
                    64:bf:54:22:be:2a:1f:2b:28:66:0b:de:7b:72:da:
                    76:17:37:ba:9e:e0:2f:34:ea:fb:e8:8d:16:91:94:
                    c9:f8:57:08:ac:4f:6c:04:28:d9:56:06:5d:83:41:
                    fc:51:d1:1c:84:9f:fb:c4:8e:2c:05:bc:b4:75:c2:
                    34:b3:b4:84:e4:9f:e8:dc:6b:0c:af:0b:ba:da:b8:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CD:61:06:AB:1D:90:AB:92:FB:E7:6B:E8:45:82:72:76:EF:35:01
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:d0:82:b0:5d:04:f1:d3:cf:f5:9f:8e:9f:c1:9d:02:95:
         8a:99:c4:bd:54:2c:47:72:b8:ab:2e:c9:be:af:ae:54:db:1d:
         32:2b:8a:fa:97:9f:9d:f3:10:1f:1a:29:e3:12:a7:d5:83:05:
         20:f7:3a:e6:39:9f:66:67:07:8c:e4:76:b7:61:ba:82:8c:db:
         ed:af:07:d8:b5:09:7f:c1:06:31:ef:1a:80:cf:bb:28:9b:7b:
         1b:b7:7b:e0:65:55:87:9b:40:0c:f7:0d:0a:32:e4:56:f7:f1:
         98:55:93:8f:3e:f9:90:79:fc:d1:be:32:da:e8:cf:6f:9d:9c:
         33:fb:03:14:b4:a8:c7:fc:78:57:d1:b7:ef:0b:31:11:8b:0c:
         6f:18:3f:97:0a:b4:ac:93:69:1a:4c:4a:cb:da:f4:ba:bf:9b:
         0f:6f:76:29:97:9e:98:a9:9d:49:67:ff:b5:60:d5:98:22:4f:
         d7:d3:2a:b8:cc:05:c2:06:25:75:83:0e:ec:25:fb:12:f6:47:
         8c:86:65:4e:0d:47:ed:c5:8d:f4:7c:7c:ef:d2:7d:e1:a5:25:
         9a:68:a2:24:30:90:be:f5:12:51:62:65:b3:30:c2:fb:f3:6a:
         ef:6f:29:46:0b:0f:8e:7b:61:6d:16:af:8d:8b:61:70:a8:99:
         38:0e:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----