Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File:                     25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier:          /UI2rDc+FJCwKFqzMVbUtmLy5kF7Zd7J/ZQfzXgm/YA=
Subject key identifier:   15:92:1E:A3:DD:15:6E:CC:EF:E8:31:29:39:69:B6:33:CB:3F:C3:84
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer:       /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial:       01962ECF76F3E0FD8C681E6A613B5BBD99AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: g6U2rYO4D42pO2776WqkgcoCxLRsAzrYvoB9utNlP5M=)
                          2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:76:f3:e0:fd:8c:68:1e:6a:61:3b:5b:bd:99:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=15921ea3dd156eccefe831293969b633cb3fc384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:bc:63:72:b5:31:be:e4:53:85:79:b1:59:
                    68:d3:59:ab:75:6e:d9:75:97:cc:22:0b:e1:8f:66:
                    81:bb:3e:27:d3:42:2b:fd:69:21:93:e1:0b:be:9c:
                    ca:2d:62:f5:bb:ef:08:ec:90:82:03:0e:61:56:2c:
                    c8:ed:ff:21:53:1b:fc:76:f1:a8:a8:3e:9b:62:00:
                    37:f3:de:f8:34:fd:c3:32:a0:92:44:16:82:79:7d:
                    b3:11:c8:03:73:12:c0:c0:62:89:7f:dc:59:2f:c8:
                    5b:63:00:8e:84:7f:97:41:a5:cb:07:15:be:7e:69:
                    3e:cf:73:b3:6e:89:32:55:ac:83:80:2f:84:8c:3f:
                    db:2b:5e:8e:81:fb:ef:60:93:60:8a:66:4a:9f:99:
                    82:6a:72:19:32:c3:bc:a7:a4:52:6e:34:39:3f:42:
                    63:0d:9a:fe:5f:bd:80:6a:3b:5a:4a:56:5d:f7:27:
                    1d:fc:34:db:f3:b3:1a:af:cb:e3:86:f1:0a:2f:1c:
                    b9:5b:99:97:6f:66:f9:9c:27:c8:10:43:99:12:1f:
                    25:c0:f4:f5:95:83:71:a5:e4:49:4e:22:3d:45:64:
                    5c:72:51:67:c0:7e:28:d9:23:58:8b:c0:1b:70:a2:
                    62:73:eb:ff:a7:7b:0a:fa:cb:ca:6f:67:94:7f:e8:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:92:1E:A3:DD:15:6E:CC:EF:E8:31:29:39:69:B6:33:CB:3F:C3:84
            X509v3 Authority Key Identifier:
                keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:12:4b:e2:ee:e8:6b:54:b6:17:21:d4:b3:9c:d5:2d:85:ca:
         8f:95:89:8e:e8:b1:43:a6:d5:8f:60:56:71:ed:01:a9:b3:f6:
         61:53:4a:8b:00:43:94:cb:8c:55:d6:49:cd:9e:7d:b2:dc:fa:
         2f:f8:d4:e2:40:13:3f:e4:fa:9a:86:34:f5:d4:c8:6a:8e:a2:
         c7:d9:13:ee:08:39:95:58:32:fd:98:9b:aa:07:85:5c:02:38:
         cd:6a:24:9b:13:a0:25:a5:a5:14:ae:e9:12:a6:ff:d3:96:e7:
         72:46:99:01:b3:71:90:fe:26:3a:fc:61:11:df:01:37:f4:8f:
         2f:f0:b7:de:d3:6c:e9:c8:bc:16:ab:8a:6d:2b:ec:80:93:19:
         54:94:c4:9e:76:bb:4a:15:fa:2f:72:ae:a5:d0:59:1e:29:d3:
         7a:c7:3d:87:d8:9c:18:17:ed:3b:d3:43:75:b5:13:a1:bb:a8:
         73:b9:92:79:95:4c:85:82:d3:f6:07:48:2e:ed:f2:4d:18:52:
         b3:d7:1a:de:37:15:53:80:08:b7:b4:d4:fa:0a:6c:b4:8e:4b:
         77:18:e8:46:c2:98:62:c9:12:98:ff:53:a6:dd:c7:69:fe:de:
         cc:03:ff:29:f6:fc:10:8f:78:6f:48:ad:dd:85:7c:4e:a0:0b:
         b9:0d:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----