Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File:                     0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier:          T+39IYBo+lM442Y4Pexyh7XURE0MFsOhajJ4MY3+JcA=
Subject key identifier:   93:5A:5E:4C:15:85:A2:3B:4E:8B:86:95:29:D9:88:46:B5:E2:D9:77
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer:       /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial:       01962DF3EA20CCCBE3CDC2D3B774498636D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number:          01A4
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: cFeZOEr3KRB2rtLOfx06wVpFiXD/GEPGPNtUKxsWXhc=)
                          2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:20:cc:cb:e3:cd:c2:d3:b7:74:49:86:36:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=935a5e4c1585a23b4e8b869529d98846b5e2d977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:81:59:04:7f:e0:b6:cb:c5:a7:88:3a:82:
                    02:aa:6f:e9:99:7c:d2:cf:3f:f6:86:c7:00:c5:81:
                    ee:ff:e7:0f:4d:f2:13:6d:05:41:bf:60:d0:5c:e6:
                    13:76:8e:8b:aa:49:dd:ec:b8:f9:7d:f9:06:a5:e5:
                    ff:ab:f0:a2:75:68:e4:0b:3b:8b:ac:46:2f:57:83:
                    e8:2c:f2:fb:26:42:ce:ef:db:53:39:2c:59:2e:89:
                    b4:6e:1c:79:a2:28:a8:7a:3c:23:f2:ad:26:b4:bc:
                    da:cb:e4:c2:7e:fd:ef:60:bc:4e:ff:4f:d8:91:63:
                    a3:53:96:ec:ab:11:cd:c8:fe:25:ce:dd:48:32:46:
                    14:83:4a:ef:52:34:dc:f2:ca:9d:91:6e:08:e7:75:
                    e6:39:50:e5:37:77:c9:8e:b3:49:29:08:b4:55:eb:
                    b4:55:87:0a:1f:74:32:e8:01:41:1c:34:25:b9:31:
                    37:57:fd:99:2d:25:e3:53:0b:86:f8:0c:46:90:d0:
                    06:c4:e4:19:be:f7:9e:70:c6:54:76:ed:63:0a:27:
                    ac:9d:22:65:d6:4d:69:ec:d9:be:37:5e:94:41:f4:
                    fe:50:ea:e7:32:b8:cd:3d:b3:b7:1e:9d:39:f8:b2:
                    eb:e2:4a:f4:b9:c2:43:97:96:48:3b:00:e6:2b:83:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:5E:4C:15:85:A2:3B:4E:8B:86:95:29:D9:88:46:B5:E2:D9:77
            X509v3 Authority Key Identifier:
                keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:a3:14:37:0f:85:e1:b2:5f:b7:e9:8f:29:6c:34:84:f8:
         80:dd:f1:46:fa:b8:74:ee:a6:57:ea:fe:38:ee:2b:b7:d3:97:
         4b:9c:7e:7d:c0:98:80:80:97:98:b2:e9:1a:26:3a:dc:14:07:
         d0:71:56:32:25:a3:72:0b:b7:7a:7d:63:1a:1d:63:cd:f6:67:
         62:44:2e:a2:b0:2b:97:a5:3d:d5:ef:66:de:b3:d7:fc:39:16:
         34:e1:7c:a7:ce:30:a5:1d:ac:4b:05:64:89:ba:82:38:e2:86:
         eb:30:e4:c6:41:0d:a6:0a:8a:3f:ec:63:98:69:e1:f1:f4:fc:
         62:98:ab:7a:7b:a7:60:01:c4:48:aa:99:5e:ce:a5:79:92:74:
         60:ba:52:c7:36:2e:f6:8e:28:9d:c8:65:ab:11:b7:d4:9f:1c:
         52:4c:ff:cf:0f:70:b0:e1:35:ff:05:d9:be:45:10:dd:a5:7e:
         54:ca:45:27:6a:c6:75:ed:9a:11:46:fe:fa:fb:fe:1f:ed:79:
         00:67:60:73:59:05:d2:44:c7:df:3a:66:7b:06:9e:85:ba:94:
         5c:af:24:17:8b:6c:f7:ce:45:0d:50:04:a6:19:e6:22:00:08:
         b6:f9:1a:55:ee:37:d2:40:ee:f8:07:6f:e8:d0:b4:fd:09:a2:
         c2:39:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----