Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File:                     DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier:          znj+Z3NmEM8KeujJNKeop+oxOoFlCodsmHzTjQ3GRzU=
Subject key identifier:   3E:D3:C4:DD:5A:F7:E8:2A:08:9A:5C:2D:90:3C:BE:6E:56:CC:F1:E4
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer:       /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial:       01962F3D923CAA3E694CDCF0F2736D0F1EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number:          0A75
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: JvCDhMgIAJNFaIYo4GEYbQXh3OafjNYkEBTOI6O/eWo=)
                          2: IMYt28KGsc1J7qdCJ8FZoivbBms.roa (hash: Lt2Qrrojs7l5TEl9OlYCV0+zE4iekqC1xALJxPDqCnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:3c:aa:3e:69:4c:dc:f0:f2:73:6d:0f:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=3ed3c4dd5af7e82a089a5c2d903cbe6e56ccf1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:85:b0:a1:df:e4:0c:d9:b5:ee:af:8c:00:
                    8c:27:57:99:b8:f9:96:92:45:e8:ed:b3:e0:a8:05:
                    49:c4:65:4f:21:ce:2a:31:59:31:28:42:e1:ed:03:
                    20:c1:0e:28:ac:fc:6f:bf:fd:c2:e7:3d:b9:a5:b8:
                    f1:e5:88:2f:2b:50:9c:df:78:48:b5:ff:32:48:98:
                    d3:43:d1:15:9b:ba:99:fb:34:80:a3:58:1b:e9:30:
                    79:04:1d:fa:1c:46:ba:79:65:1c:57:9b:5e:01:3c:
                    61:0e:d7:8e:73:28:9f:de:c3:87:0e:36:8d:da:f5:
                    56:9f:a4:da:04:6d:01:41:2b:08:14:c1:d2:19:3b:
                    e9:9a:0f:a3:ce:c1:a6:9e:1a:76:db:23:83:fc:a3:
                    2e:93:9f:af:45:aa:e2:7c:5c:0e:90:93:00:3c:37:
                    bd:e6:d4:f4:9c:09:18:1b:ca:63:50:2e:50:3a:65:
                    19:6a:82:b9:31:e4:eb:f5:21:af:75:62:85:a9:0c:
                    62:5b:04:67:d7:6a:da:62:83:3e:3e:3f:11:13:94:
                    16:e6:5a:83:c5:ea:f0:47:3e:17:a2:86:2a:2d:9b:
                    22:56:5a:7a:1e:39:e9:4c:9f:b6:61:6d:d2:d5:49:
                    e4:47:5e:4b:ec:3b:85:7b:3c:93:b3:7e:69:d7:58:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:C4:DD:5A:F7:E8:2A:08:9A:5C:2D:90:3C:BE:6E:56:CC:F1:E4
            X509v3 Authority Key Identifier:
                keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3e:63:70:7c:82:d8:14:55:30:25:45:20:85:c4:c9:78:0c:
         31:a0:4c:aa:48:3f:83:2d:32:4f:1d:50:40:b5:d4:ad:91:41:
         57:d5:f1:69:bb:f4:96:e7:ca:1c:2a:3f:9f:2f:bd:8a:46:18:
         44:a8:9d:5d:d4:ca:c1:84:cb:b0:20:b6:4b:31:64:38:d9:9f:
         37:1d:92:e7:47:e3:b4:fa:ab:f5:b5:5b:86:80:be:3e:e5:9d:
         7c:f9:ee:e9:3f:13:62:24:07:77:ec:47:db:b9:93:f6:4d:93:
         34:aa:84:84:fc:94:12:9a:5e:57:f3:af:d5:6c:4f:86:0f:88:
         09:d1:5a:d2:02:1a:dd:af:40:1a:e6:43:db:32:51:8c:7f:7e:
         b6:be:78:5f:4c:0d:21:f8:9c:17:e5:1a:67:42:ad:5c:fb:9e:
         44:de:e3:f9:83:42:2f:f0:f9:31:01:b2:3d:db:74:3c:3a:48:
         8c:d4:92:ba:10:e3:80:cf:dc:42:b6:a8:83:d0:33:a3:5f:fe:
         91:3b:74:1b:04:53:e9:d5:a4:a4:c8:7f:8e:70:23:ad:f0:fa:
         2a:ce:07:61:58:e8:82:e9:ed:ea:c4:56:61:57:a0:39:83:d8:
         84:52:a5:45:91:9e:fa:1f:7a:65:93:d2:ff:a6:0f:ad:53:7a:
         bc:32:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----