Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File:                     Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier:          oHvnE072v4tRHz9GVYI8q94+o75KA8e8vAxlLp7+EAk=
Subject key identifier:   AC:08:3E:E8:F9:BC:73:5A:34:24:09:E4:BC:B7:A5:49:93:55:1A:F2
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer:       /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial:       01962FAB92B6FBF5527848FDDFE4C2D404D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number:          0AE6
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: /0nksu2mJ/6TPe3fPA1reQedzCLcMpkZvQW/RRfxZtQ=)
                          2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:b6:fb:f5:52:78:48:fd:df:e4:c2:d4:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=ac083ee8f9bc735a342409e4bcb7a54993551af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:55:81:5c:53:05:3b:41:62:12:0f:48:3d:
                    79:6c:0f:3d:03:40:18:8c:7e:1e:b5:a1:2e:be:37:
                    0f:56:a1:98:c5:b8:54:76:9b:a5:2e:7d:af:4a:6d:
                    3c:75:38:de:57:36:a2:0a:99:b5:d4:d0:e9:68:1e:
                    95:c6:15:7d:04:55:aa:b8:72:74:d9:12:c0:48:c1:
                    07:c3:c3:ad:af:f0:3f:fe:8b:a0:6e:c3:d8:20:67:
                    e2:2f:87:3a:86:ad:0e:ce:cc:b3:aa:12:f8:35:20:
                    a9:30:6c:e2:7d:33:3a:ee:fd:dd:3c:34:ea:49:ca:
                    1c:9f:05:41:04:e7:85:82:b6:ee:07:04:fe:ce:1d:
                    9c:8c:2f:3e:69:a3:6b:24:64:5d:23:c0:42:c9:5d:
                    e4:4b:a2:a2:b6:26:38:e6:c9:cc:09:1b:4a:25:3f:
                    1f:5e:77:c8:4e:08:86:57:25:a7:8f:88:14:b8:30:
                    e2:bd:a9:85:2e:3f:8d:33:bf:5f:c9:ec:30:5f:fa:
                    a5:5d:07:43:4b:59:d7:e2:0a:b2:80:b7:e2:c8:65:
                    5a:f1:3b:c8:32:9d:cf:69:29:ec:19:70:fc:e9:7b:
                    28:bb:11:3e:50:3a:1f:4a:ee:1c:b8:d6:d2:39:9d:
                    3e:8a:4f:12:f8:63:61:9a:26:2f:c8:d4:0e:c9:4e:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:3E:E8:F9:BC:73:5A:34:24:09:E4:BC:B7:A5:49:93:55:1A:F2
            X509v3 Authority Key Identifier:
                keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:f6:e2:ec:04:7f:f7:5b:46:2e:85:8a:3d:cb:e9:a7:85:
         07:2a:0b:38:41:36:be:37:d0:7f:18:46:6b:eb:50:12:d4:92:
         22:88:36:63:28:54:b9:50:ef:79:5d:03:f6:a0:32:1a:ce:ce:
         74:c7:3d:6e:10:51:49:65:5b:89:91:8a:0a:bd:94:2d:45:61:
         72:f1:5f:80:e0:37:c6:b1:90:89:6f:04:0b:fe:1e:8b:ec:99:
         a6:5c:18:bb:8b:f8:f1:43:95:5b:21:b5:d6:ad:97:7b:93:41:
         50:e8:10:63:c5:19:c4:3f:04:01:d0:42:40:56:af:f8:22:5b:
         a8:84:fe:c9:54:e8:cb:18:63:04:78:f4:2a:b9:27:34:87:71:
         a1:cd:c3:49:a1:b6:60:3c:e3:e1:a2:05:29:6e:7b:0a:a1:2f:
         36:7b:32:ae:6b:8f:d4:bc:75:ec:e6:38:ae:7d:cc:0c:21:f0:
         0d:00:64:06:05:99:a0:bf:34:1b:39:cc:ac:7d:5b:90:2e:dc:
         b9:d5:cf:da:5c:b8:eb:09:a7:57:c7:c4:59:26:19:11:a9:4c:
         df:98:eb:fb:cb:49:8d:1c:68:a2:04:1f:e5:8b:52:10:b6:2f:
         67:65:03:30:55:07:b6:ed:82:29:fd:49:ad:1a:96:01:ea:f0:
         68:59:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----