Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File:                     DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier:          UqOlOSYEFbQP4ASlcHQXH0iCMmyAmGakZnGf2A+ZaL0=
Subject key identifier:   CD:C9:55:60:BF:73:07:DA:DA:DA:C0:9F:F3:FC:CD:63:F3:85:3E:5A
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer:       /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial:       01962ECFC6647B6B5DBECFE86C33A64EA643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: vxAl1mMQl6r6RNw1HqJWRZ9h9jQabuT0IEXu3GiMeLc=)
                          2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:64:7b:6b:5d:be:cf:e8:6c:33:a6:4e:a6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=cdc95560bf7307dadadac09ff3fccd63f3853e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:d3:73:03:26:fe:bb:91:7c:72:49:8a:1d:
                    87:7c:d3:a0:e0:49:23:b2:6a:2f:c6:a6:ca:b6:6d:
                    dd:35:3e:11:fb:11:2b:1b:08:c5:4c:88:ae:34:ff:
                    51:29:e6:14:e7:8e:ef:89:53:19:e9:23:b4:9b:4f:
                    25:ba:19:4c:46:d0:e3:34:2f:3e:2f:20:a4:31:6c:
                    07:d6:8b:4f:63:c0:1e:76:3f:93:85:9f:f3:41:0a:
                    03:99:ff:36:9b:a9:02:ae:fc:c8:04:41:87:7e:0d:
                    e6:f7:f2:d3:c7:39:51:ac:a6:e2:f9:05:8f:3d:b5:
                    f8:0a:45:7f:68:73:83:18:c5:62:81:c0:be:48:4c:
                    ea:32:9a:77:be:32:b0:45:51:f5:ed:32:39:45:50:
                    df:b7:a9:37:87:31:a1:2e:66:2c:5f:7f:e5:97:a6:
                    9b:79:e5:18:d7:7c:de:55:3e:67:c3:f8:22:db:9f:
                    0d:9d:fe:b0:91:d3:81:4a:7d:78:2a:d0:bc:b0:7f:
                    7b:2e:17:4e:cd:d0:4f:62:88:fe:80:f3:40:dc:09:
                    e9:fc:76:00:d8:cc:21:bf:31:66:46:95:c3:06:eb:
                    d3:ce:73:87:c0:45:7c:7d:fb:17:99:a1:25:b7:61:
                    a2:31:17:71:b0:b0:6f:53:53:5f:a1:98:66:0a:28:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:55:60:BF:73:07:DA:DA:DA:C0:9F:F3:FC:CD:63:F3:85:3E:5A
            X509v3 Authority Key Identifier:
                keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:6e:f3:c3:be:5c:6a:d0:87:7f:d5:9b:ed:dc:39:4e:f5:f5:
         8f:4d:3a:29:6c:1f:64:db:8b:ef:49:e8:ae:6e:79:ef:ae:d9:
         db:8b:9d:34:02:05:1a:d6:18:ca:31:96:3b:37:32:cc:dd:e3:
         b8:8b:e5:86:f6:cb:9f:16:ff:e8:7b:23:a3:8d:82:06:fc:d9:
         4d:36:03:e6:a5:04:54:d1:ef:fb:18:cd:cf:42:af:88:bc:30:
         33:fb:a0:43:e1:94:1d:43:78:b2:c7:17:66:c0:a7:c7:da:b7:
         9d:de:0e:29:df:ce:b8:19:b2:48:f3:46:43:89:af:38:06:19:
         be:e6:a3:be:ba:1e:6c:5d:6c:51:0e:24:45:86:70:08:2b:6c:
         52:41:1f:44:8c:35:69:35:49:9a:70:9c:63:af:76:a0:ae:4e:
         55:06:49:b9:b5:9e:60:02:23:0d:de:c5:ec:2d:b8:6e:5a:0d:
         28:a9:c5:3e:6c:ac:b9:1c:e6:f3:31:9c:85:fa:71:88:fe:8e:
         40:60:e4:82:a1:b9:eb:b7:2f:f2:0d:d5:d2:90:86:e0:1d:61:
         ee:d8:f4:50:c7:c7:30:5b:e6:b4:b1:a4:a5:6d:d7:cf:a8:2d:
         93:be:b6:28:71:a9:27:4f:88:e8:2f:4b:db:2c:9f:b4:6e:25:
         c3:75:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----