Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File:                     CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier:          tOwqHedLnhlEMIxTTVlsLbuMcmfE6wZOISXVSn4MyYA=
Subject key identifier:   A7:6C:B8:F2:04:C3:5D:91:94:84:CE:46:BD:23:C0:0F:88:FB:92:B2
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer:       /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial:       01962F065AF1345BE45F101C1E1060713D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number:          1277
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: 3P9Pb98UZ6RG1E6JfJ+Y8yNN2+gEipe6HOL932933yU=)
                          2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5a:f1:34:5b:e4:5f:10:1c:1e:10:60:71:3d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=a76cb8f204c35d919484ce46bd23c00f88fb92b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:72:20:1b:b6:dd:4c:e3:1b:6e:ac:28:72:
                    d9:8b:94:4c:07:86:9a:99:93:85:11:a6:f2:b5:9a:
                    e0:24:8f:a3:4a:a4:68:0c:bf:01:8f:29:1c:f9:7c:
                    11:fa:37:52:15:5c:19:01:aa:79:9a:1a:bb:28:c6:
                    7c:ef:14:b5:ec:2f:2a:6b:5a:c6:dc:4a:de:a2:d2:
                    67:3e:59:86:cb:a3:0d:0f:7c:ee:69:8b:eb:44:e8:
                    28:37:54:a3:ad:b0:ca:de:a3:34:5e:71:ad:59:e2:
                    95:79:61:1f:8c:fd:dd:e6:7e:53:6f:65:3f:6e:b3:
                    52:8e:c5:71:2f:74:10:48:b2:c3:e6:c4:78:f5:ea:
                    1b:43:e9:b9:c7:bc:70:e2:10:a5:7c:35:27:97:7e:
                    4a:39:f1:60:bf:f6:eb:3b:44:0d:66:57:22:03:48:
                    4f:57:fe:db:04:f1:05:e9:07:2d:3f:94:0b:b3:9b:
                    3e:34:09:2e:b7:83:8c:28:c7:1c:1d:d3:cf:de:3a:
                    c6:ba:ed:55:ce:4e:7d:00:fa:59:30:ac:34:60:84:
                    da:93:36:41:bd:39:bc:51:0b:a2:19:c8:49:4b:6a:
                    9e:e1:09:8b:f0:8a:9d:73:42:b4:71:96:95:0a:06:
                    91:67:31:c5:71:46:a0:da:76:b9:b5:90:4d:ab:15:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:B8:F2:04:C3:5D:91:94:84:CE:46:BD:23:C0:0F:88:FB:92:B2
            X509v3 Authority Key Identifier:
                keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:af:98:c5:a9:8f:d0:32:a7:2d:64:06:49:a2:93:19:5f:50:
         7d:b3:c5:bb:8d:2e:c6:5f:42:bf:d4:34:db:ff:f2:ae:15:7b:
         13:2f:33:9a:ef:4e:b9:fa:62:34:44:2f:0e:2b:7d:1e:19:e2:
         cf:1c:a5:4f:06:1e:d5:f8:cc:d3:71:8e:b4:d1:37:fc:51:74:
         2f:12:de:bc:31:eb:87:e2:6d:d9:89:57:19:d6:68:97:81:3a:
         dc:ef:f9:60:39:c8:e6:4b:da:5e:0d:a3:9f:a5:f7:69:55:fe:
         f4:9d:96:dd:b8:44:6b:f7:c7:99:db:ef:38:d6:4c:2d:18:0b:
         23:02:73:77:60:5d:72:ab:4f:f5:82:e1:c0:9c:df:d3:a0:4a:
         7b:97:12:9d:f9:f5:e5:5b:06:f3:1f:6b:dd:33:38:89:a5:aa:
         91:81:3c:67:20:5a:a9:18:86:68:44:d0:34:59:53:e1:7b:6c:
         35:c3:09:80:45:c5:d1:a5:cc:86:81:71:47:cb:51:b4:e1:e9:
         37:13:9b:13:3e:d3:36:c6:22:1f:4f:b8:e4:43:c0:69:e0:24:
         1c:32:47:73:96:ac:72:56:1b:ad:72:fe:dd:52:59:1f:c4:7d:
         b6:ff:78:a1:a0:40:6f:e5:78:37:06:2d:a5:15:e5:0c:bd:78:
         ff:c3:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----