Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File:                     dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier:          SE8bS5c7OeMtDR5dOEZYxOSX3q++Be9j1B5iJX/iNZY=
Subject key identifier:   E6:87:84:67:52:63:69:BF:6D:ED:5E:BC:0F:5C:7B:36:1C:67:BC:AA
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer:       /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial:       01962F06C400AEBD6062F2EEF64E12E5D48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number:          0458
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: WPYFF2WB0WAXzVg7dr/BNwbuFaNDKYNP1gKMuGBI78U=)
                          2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:00:ae:bd:60:62:f2:ee:f6:4e:12:e5:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=e6878467526369bf6ded5ebc0f5c7b361c67bcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:d3:df:c2:20:fb:9a:63:d0:5e:54:97:c1:
                    b8:b3:f8:ec:90:f3:2b:bb:11:49:e1:37:b9:c8:5c:
                    32:bf:5c:3a:30:75:09:74:5d:ef:16:f0:b9:2c:54:
                    38:79:30:48:2c:02:ed:69:93:7b:2b:7a:63:8e:d6:
                    74:4c:23:f0:f4:1b:92:d5:c6:81:fd:77:f9:99:d5:
                    67:07:0d:65:77:bb:72:ba:c2:33:98:04:ff:17:06:
                    fc:18:c1:ea:03:80:f8:93:89:aa:62:72:e6:0f:23:
                    95:1e:26:b2:16:20:94:ee:56:bc:81:d4:a4:ec:98:
                    2e:b5:93:8e:a6:bf:4b:cb:53:8e:08:0b:10:3f:a7:
                    20:40:06:93:9e:e6:73:55:11:a1:fb:22:c6:6a:41:
                    f7:16:3c:ae:7f:e5:32:9e:f6:45:38:2f:75:51:8c:
                    8b:c6:b4:90:aa:ba:81:e0:53:6d:b5:36:3a:27:ca:
                    32:04:68:02:45:ca:6f:b8:c8:38:b0:0f:a7:74:1b:
                    70:37:10:e4:32:b7:9a:52:3f:79:ec:77:f5:b7:31:
                    69:ea:2b:77:eb:92:f2:59:4d:63:15:99:ce:dd:b2:
                    c6:d7:22:9b:b1:7e:1d:0b:3f:45:ff:33:13:37:f3:
                    67:56:a8:a7:dd:00:af:07:f6:2d:66:f9:96:b0:c5:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:87:84:67:52:63:69:BF:6D:ED:5E:BC:0F:5C:7B:36:1C:67:BC:AA
            X509v3 Authority Key Identifier:
                keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:19:d5:0a:a2:41:78:07:1f:6d:cf:14:3a:5b:f8:bb:e4:8e:
         62:0c:b7:76:c8:56:78:b5:ca:0f:08:42:fe:c5:f7:92:aa:97:
         27:43:de:17:23:c9:ed:fd:df:44:ee:41:7d:b4:d7:d9:49:01:
         23:cc:8a:9b:b4:e0:da:37:33:ec:26:1c:f8:25:f5:04:eb:1e:
         41:61:ef:6c:b9:e7:4d:b0:bc:2c:7d:19:c5:66:ac:64:3a:f8:
         cc:39:40:f1:5e:c4:bc:32:97:d5:81:6a:41:4a:e1:72:d9:3c:
         65:78:9e:87:aa:96:8a:5a:a7:2c:3b:0f:52:b9:45:a2:f0:4e:
         92:4a:5f:5b:f0:7e:53:49:92:3b:c8:6b:6c:03:91:e7:63:5b:
         72:0f:8e:92:7d:80:cf:20:13:92:19:6f:5b:e6:f1:86:9d:74:
         b5:ae:dc:14:30:aa:e5:4b:57:e9:ff:ef:df:a4:bb:36:0f:69:
         f7:8f:29:18:b6:71:d6:aa:aa:fe:bf:29:73:48:b4:3b:c6:f2:
         41:30:fe:3e:7e:0a:68:1c:a3:f5:36:00:5c:76:29:62:31:33:
         f2:5d:a1:c3:d5:3d:bf:7a:51:ec:61:79:db:8f:16:f8:66:e5:
         0d:b4:50:0b:2f:a6:17:ca:cb:fc:cd:c0:04:36:ea:0e:09:d0:
         cf:47:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----