Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
File:                     dvLzQc-Yuei0bt04mkgGTHuub5o.mft (raw, json)
Hash identifier:          hEv30KZYXRbVczGpJU/qdKri+mocF5cwxqpiA/uVLSM=
Subject key identifier:   89:CA:AA:7D:F4:50:09:BB:57:4A:BB:E2:A5:EC:2F:D8:13:85:85:FA
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Certificate issuer:       /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial:       01962E98C53DA4FC4A90B27510EA74B0CAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
Manifest number:          0CCD
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: dvLzQc-Yuei0bt04mkgGTHuub5o.crl (hash: 9ZQu4gG6LGQY8ipXzJNOZga0CYb9f3pFOKS89+bLH0k=)
                          2: pLFGIGuwO6p3VXl7848DpqUCykE.roa (hash: cQnY5M6yFrvUehgYlIPw55V4Prm/y9EByLYSiv2JqLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:3d:a4:fc:4a:90:b2:75:10:ea:74:b0:ca:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=89caaa7df45009bb574abbe2a5ec2fd8138585fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:22:ee:3c:e3:be:01:9a:4b:d2:c3:7e:65:
                    56:14:d4:e3:a8:ab:22:59:d8:95:32:9f:51:71:76:
                    dc:8d:49:7c:59:91:ff:93:17:91:e7:09:bf:2d:16:
                    6c:23:06:d6:19:ef:66:bb:09:f3:27:3a:5f:9d:c2:
                    b7:13:a9:e2:13:9d:5a:10:dc:40:66:f1:0d:1e:00:
                    e1:83:75:21:83:e6:d2:65:2b:1e:8e:93:bb:07:06:
                    8d:12:c3:34:69:f9:f9:ff:91:3a:64:e7:6e:92:a9:
                    37:a6:52:81:68:80:43:53:e8:57:f4:dd:84:09:31:
                    08:9d:44:17:92:05:8a:ec:75:8e:77:21:23:ee:99:
                    c0:79:90:e9:b5:4b:e2:7d:66:d9:eb:a4:5e:98:6b:
                    79:94:d6:ac:8e:e6:f9:70:4d:e4:63:2d:cc:ce:63:
                    32:44:be:e7:76:12:15:ed:1b:25:57:72:b3:e9:fb:
                    08:b9:cb:6c:33:38:b9:e3:80:d9:cc:1b:e4:82:be:
                    ce:54:0e:75:39:c6:bf:80:0a:7b:59:cd:04:2d:8c:
                    f1:88:90:63:14:11:87:81:18:0b:ad:d4:68:c0:87:
                    dc:b3:a7:40:93:3b:35:39:32:f5:d6:27:d8:7f:94:
                    13:65:fe:6a:80:c4:1a:33:8e:18:5e:c4:8d:c9:2e:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CA:AA:7D:F4:50:09:BB:57:4A:BB:E2:A5:EC:2F:D8:13:85:85:FA
            X509v3 Authority Key Identifier:
                keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:54:e3:ab:e8:c7:8b:23:45:d1:cb:3c:e0:35:85:8f:60:5c:
         a6:a5:b5:96:57:aa:28:8e:25:6b:cc:11:da:fe:bc:ed:ec:d7:
         99:6e:20:2d:d3:70:3d:ad:19:53:4a:99:0f:d9:c7:5f:cf:4c:
         44:ef:0e:e8:1e:17:60:7b:ed:33:82:92:ab:7d:63:1b:60:b2:
         82:da:6d:ef:b1:fd:d1:4c:55:a3:23:d6:98:97:31:bf:f6:ce:
         f7:8c:29:3c:4f:9e:2e:1b:72:ce:b2:48:47:53:c2:91:3c:c6:
         0c:33:db:99:9d:9a:67:63:c8:01:42:ba:ce:f8:0e:0b:a5:dc:
         25:3d:cc:60:f4:75:d0:bb:6f:cb:ab:81:70:cb:95:f3:cc:56:
         1c:92:91:1e:4e:c5:33:1d:1b:2c:70:0c:df:57:79:8f:ce:a5:
         0d:df:df:3a:c8:07:3b:ef:09:a2:8f:c5:e6:62:37:80:9e:6c:
         08:b7:84:e3:0b:f9:c6:25:62:3d:db:16:da:35:e5:66:28:70:
         98:76:28:fe:d1:bb:28:76:63:7c:50:a5:42:7e:fa:4a:ae:05:
         72:ba:df:2f:4a:41:6a:f5:f9:8e:ef:79:16:57:41:fa:66:d4:
         68:67:e9:1c:f9:9c:3c:03:1a:2b:71:23:11:0f:e7:3d:2e:f6:
         f5:4d:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----