Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File:                     DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier:          9wzONoxCdfI2yToiaa/HANnTqmKtZp2qCbnaHjAi0P8=
Subject key identifier:   15:5E:DF:7B:73:9E:78:72:C3:9B:42:CC:9E:E6:34:EE:A8:D7:78:E2
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer:       /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial:       01962F06A99A9331355D5725A8892E5D9689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number:          110B
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: anQZZzAm3VosCKsQUNxNy8XmWgix67jFmQc3MYNecDo=)
                          2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
                          3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:9a:93:31:35:5d:57:25:a8:89:2e:5d:96:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=155edf7b739e7872c39b42cc9ee634eea8d778e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:a1:99:f2:c3:59:2b:de:51:6d:aa:ef:4e:
                    cf:4c:4a:03:cd:67:ac:da:7c:b1:d4:43:69:6b:e6:
                    f4:79:8a:90:38:84:94:ce:b0:34:5b:16:93:bb:a2:
                    9f:5f:85:77:33:38:7a:3b:37:1f:64:32:dc:00:1b:
                    5a:36:1a:4e:23:b7:20:48:04:c0:50:88:3f:ce:0d:
                    c7:a5:12:19:27:b8:8e:26:61:0b:3d:4c:6a:36:38:
                    d2:8c:15:29:98:ed:b4:61:1a:fe:f6:bf:42:62:a6:
                    d8:7c:12:9d:99:44:4d:8d:ee:3e:45:37:17:cd:0c:
                    c9:36:94:97:68:97:3d:51:16:7e:f2:65:79:f3:d7:
                    d8:fd:ff:39:70:18:d0:9a:e7:73:c4:0b:a2:20:fe:
                    8c:d9:1e:39:92:04:a1:ba:4f:a4:41:1f:da:5e:8d:
                    d3:39:f7:dc:06:44:f2:2c:30:aa:d1:8c:f2:6a:e9:
                    c4:70:4f:4e:93:56:72:cf:fe:85:7a:ee:a8:e9:40:
                    ed:ae:11:14:dd:49:a6:8a:0e:2e:cf:ff:09:7f:eb:
                    e7:85:19:a5:74:41:24:29:df:b9:03:66:ce:fa:aa:
                    e0:0a:1f:bf:24:e4:5f:6b:80:ea:f6:0a:0c:40:66:
                    4a:93:3b:57:1d:0c:ae:d2:d5:61:2e:2a:fc:00:3a:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5E:DF:7B:73:9E:78:72:C3:9B:42:CC:9E:E6:34:EE:A8:D7:78:E2
            X509v3 Authority Key Identifier:
                keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:21:07:ca:1f:2e:f0:e2:59:3e:e6:99:d0:f3:cf:44:36:79:
         36:60:7f:9d:27:18:ca:69:67:85:b5:11:2f:6a:f9:42:35:5a:
         89:92:e9:af:64:22:f1:2c:a9:e1:b3:38:a3:8e:96:9b:44:13:
         2c:ca:09:cd:83:e5:2e:e5:84:0b:41:0b:ca:26:8e:bf:3d:a1:
         d4:9b:b1:2c:5a:97:61:0a:49:bf:5e:6a:e0:bb:db:7e:cc:95:
         cc:80:63:1c:a1:b6:c6:c2:70:58:f2:81:f0:66:63:90:31:c7:
         d6:c6:cf:1f:83:66:f1:e4:47:fc:e0:ae:f8:82:4e:66:c0:6e:
         26:3f:c5:5f:2f:74:01:7c:0b:44:a5:c6:f5:30:46:db:04:67:
         c0:b0:fd:9e:69:e6:6c:44:40:d6:37:1b:2f:19:59:ca:dd:d3:
         e5:d7:d8:0f:a6:2d:b7:94:01:ca:63:5d:7a:14:a3:73:10:12:
         ab:a9:66:6b:70:b4:91:e3:73:d2:ff:74:8d:26:31:ee:27:4d:
         fa:02:71:6f:fa:9a:7c:14:69:c6:aa:73:63:18:76:85:4e:47:
         d6:30:a4:da:d7:59:20:d0:e4:43:3d:e1:79:4c:12:bd:47:86:
         f9:6e:da:0e:c9:7e:d5:d3:ca:14:bb:ce:ea:8e:9d:46:70:5f:
         1b:e0:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----