Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File:                     DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier:          DiTm/9L/B6LZdzSdWZPwVFpXbSkMHoy8HE5+R7R/YCA=
Subject key identifier:   A5:06:93:AA:57:20:9C:3C:88:78:8F:96:6C:3D:1C:12:66:4C:F6:82
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer:       /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial:       01962E618E07BDB9F0FFC704367AEE2B82F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number:          0C19
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: Ing6FHS9JFERAYrlIgN1UX5od1B2yiWKAXYoyFCTmEQ=)
                          2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:07:bd:b9:f0:ff:c7:04:36:7a:ee:2b:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=a50693aa57209c3c88788f966c3d1c12664cf682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:94:73:8a:73:26:ba:31:fd:a6:f4:3a:51:
                    bd:42:e1:8a:0c:1b:58:ad:89:c9:bc:da:1c:22:6b:
                    eb:eb:4d:fa:40:bb:55:be:bb:cc:d4:78:f1:56:66:
                    70:a4:1d:e7:7b:c0:f6:84:73:dd:d2:73:07:b8:a6:
                    66:3d:1d:26:ee:18:e6:ac:87:70:ff:83:67:aa:38:
                    a6:8b:8e:70:1f:9b:30:b0:6f:1f:2f:b4:dc:bd:94:
                    c2:be:53:39:7b:56:91:b4:74:be:85:37:6c:80:ce:
                    a6:92:0e:be:28:06:e1:c4:a9:a3:97:d5:a7:b5:1a:
                    76:c2:89:a8:50:ef:f7:a2:69:85:81:4a:5b:15:fc:
                    9b:6a:17:2c:b7:63:7d:84:3e:a5:3f:4f:6f:9a:bd:
                    db:f5:c8:58:c6:aa:5b:93:89:8a:a1:43:26:62:5d:
                    99:51:bb:fc:51:b8:ee:09:de:87:32:f5:28:44:42:
                    c8:0e:ef:b6:c4:73:14:93:f9:15:b6:bb:30:6a:bf:
                    50:23:b7:65:8d:db:f1:b2:fe:f0:c1:74:3d:87:fb:
                    f8:50:47:30:4e:a2:cb:39:6d:75:7a:7d:51:fc:7a:
                    ac:e4:c0:9a:2c:ce:c9:6b:b4:24:59:6c:38:9f:c0:
                    c3:6e:e2:4e:57:18:09:70:2e:38:1a:f9:8d:f5:34:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:06:93:AA:57:20:9C:3C:88:78:8F:96:6C:3D:1C:12:66:4C:F6:82
            X509v3 Authority Key Identifier:
                keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:63:db:9b:29:9f:04:98:03:44:8f:ec:fd:5a:77:b6:62:
         c9:ca:ac:39:18:8b:91:a3:ee:7f:73:32:ef:bd:23:6d:e5:73:
         26:6c:08:ba:38:0f:f7:96:62:fe:4b:e9:fb:12:a3:56:0d:6f:
         60:66:83:52:26:3e:7d:3f:2c:a6:c5:14:36:95:d2:92:bd:05:
         40:a9:67:86:e4:32:cc:fb:cd:ff:67:b9:01:8d:26:25:ca:5e:
         da:df:a0:e6:51:4b:e4:3a:98:c8:d0:4b:d6:69:09:09:f6:e3:
         aa:ae:c0:0c:80:80:68:79:19:50:bc:e6:b1:7c:3d:0f:cd:7a:
         95:34:d6:a0:c8:90:c6:8e:1f:1a:62:89:c7:db:7b:27:17:f7:
         99:2e:80:11:9b:f1:4d:f3:d5:6c:14:b7:ba:43:c1:d2:bc:81:
         ab:6b:71:24:0f:d3:33:ff:33:9e:61:90:4e:b1:5a:d9:64:4a:
         49:75:f6:a9:01:39:2b:db:7a:a6:42:03:27:24:28:de:2a:9b:
         85:78:9b:f1:bb:b6:83:ff:89:74:93:68:c1:a0:34:49:27:55:
         6f:de:59:a7:cd:a6:61:5e:9f:bc:c3:3c:01:f3:09:c3:91:cb:
         09:ac:81:ad:73:c7:37:66:2b:c3:58:3c:e0:73:f4:6c:bb:8c:
         fb:97:79:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYY4Hvbnw/8cENnruK4L3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1
MWU1N2UwHhcNMjUwNDEzMDkwMTA3WhcNMjUwNDE0MDkwMTA3WjAzMTEwLwYDVQQD
EyhhNTA2OTNhYTU3MjA5YzNjODg3ODhmOTY2YzNkMWMxMjY2NGNmNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z6Uc4pzJrox/ab0OlG9QuGKDBtY
rYnJvNocImvr6036QLtVvrvM1HjxVmZwpB3ne8D2hHPd0nMHuKZmPR0m7hjmrIdw
/4Nnqjimi45wH5swsG8fL7TcvZTCvlM5e1aRtHS+hTdsgM6mkg6+KAbhxKmjl9Wn
tRp2womoUO/3ommFgUpbFfybahcst2N9hD6lP09vmr3b9chYxqpbk4mKoUMmYl2Z
Ubv8UbjuCd6HMvUoRELIDu+2xHMUk/kVtrswar9QI7dljdvxsv7wwXQ9h/v4UEcw
TqLLOW11en1R/Hqs5MCaLM7Ja7QkWWw4n8DDbuJOVxgJcC44GvmN9TSzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUGk6pXIJw8iHiPlmw9HBJmTPaCMB8GA1UdIwQY
MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It
M2M1MDE4MDc4MGIwLzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw
LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKpj25sp
nwSYA0SP7P1ad7ZiycqsORiLkaPuf3My770jbeVzJmwIujgP95Zi/kvp+xKjVg1v
YGaDUiY+fT8spsUUNpXSkr0FQKlnhuQyzPvN/2e5AY0mJcpe2t+g5lFL5DqYyNBL
1mkJCfbjqq7ADICAaHkZULzmsXw9D816lTTWoMiQxo4fGmKJx9t7Jxf3mS6AEZvx
TfPVbBS3ukPB0ryBq2txJA/TM/8znmGQTrFa2WRKSXX2qQE5K9t6pkIDJyQo3iqb
hXib8bu2g/+JdJNowaA0SSdVb95Zp82mYV6fvMM8AfMJw5HLCayBrXPHN2Yrw1g8
4HP0bLuM+5d53A==
-----END CERTIFICATE-----