Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File:                     dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier:          PGarP/XvleUZ4BId8RQOt//2aVr8QklptiyxjYB+cLs=
Subject key identifier:   0B:F1:A3:8D:8A:BC:43:FA:95:89:3D:A6:65:75:AA:76:B7:D0:3F:81
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer:       /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial:       01962F069BD7F7F3CA55699A3F66DB6266BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number:          07E0
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: Cbs35qdFV4bao+ppplj5qBn1yyXx5qXWsy7Rc3G5aCY=)
                          2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9b:d7:f7:f3:ca:55:69:9a:3f:66:db:62:66:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=0bf1a38d8abc43fa95893da66575aa76b7d03f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:dd:54:95:cc:5f:65:ce:0d:f7:6e:5d:5b:
                    d2:2e:c7:e9:30:77:03:dd:61:86:0b:31:31:23:50:
                    70:e4:73:84:d3:28:1f:f5:c6:02:22:29:e0:4b:7e:
                    19:88:18:20:cb:c1:ea:0e:27:05:cd:f6:62:f4:b7:
                    5c:ed:5c:b3:13:89:01:3a:f3:d8:0b:c7:e3:c0:b2:
                    39:12:79:a5:44:1e:69:8e:8f:73:ac:16:b5:dd:96:
                    ab:ac:60:07:10:53:11:77:8a:58:b0:d0:df:a8:68:
                    46:1a:ac:81:af:c3:1c:29:25:3c:6c:ec:ee:fd:36:
                    ac:8c:2c:73:d2:b2:ec:ef:b5:95:10:5f:6f:3c:5c:
                    82:91:d5:a5:3e:28:fe:87:34:30:61:4e:4c:40:78:
                    99:fa:9a:37:96:fb:c0:75:d1:b9:58:85:e6:84:67:
                    04:df:9d:45:d1:d6:24:4e:fc:50:1d:33:d4:86:c4:
                    af:46:2f:2c:57:9c:ad:84:b9:06:7c:5c:21:a9:4b:
                    c1:a6:34:15:2d:37:f6:df:8b:90:4b:e3:ad:53:35:
                    af:74:08:bb:0e:f0:36:52:a1:2e:42:60:17:50:3c:
                    fc:14:37:92:c0:cc:75:f6:2b:7f:4a:09:96:95:f5:
                    a3:e1:72:50:b8:a5:b6:62:91:29:91:e8:fb:fd:8b:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F1:A3:8D:8A:BC:43:FA:95:89:3D:A6:65:75:AA:76:B7:D0:3F:81
            X509v3 Authority Key Identifier:
                keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ee:ba:0e:d0:c7:08:c7:6c:28:f1:9e:88:69:0c:03:0a:b7:
         49:d8:13:63:04:08:a0:83:fb:48:38:5b:5b:18:fb:ea:fc:a6:
         5d:d7:b4:9c:c6:36:26:2d:6e:d7:76:03:0d:07:10:0d:30:d0:
         c1:8f:ae:02:64:ba:86:63:93:fa:8b:d8:40:e5:3c:0f:e7:e3:
         34:f0:55:53:91:3d:e6:99:5b:c6:f6:a0:fb:a5:7b:36:d5:95:
         06:9f:f7:d7:c9:91:96:2d:b9:cd:33:91:49:71:8c:90:0e:d9:
         08:16:04:2d:3f:c3:20:2c:1e:2b:5a:1f:5e:5f:2c:a7:2a:26:
         b8:4a:3e:65:5f:28:a6:59:1d:3a:8a:95:05:73:98:23:31:d4:
         07:5d:70:ff:bf:f8:d7:c9:f2:af:b9:f7:4a:96:aa:fe:62:a9:
         6e:f2:b0:87:ec:3e:4e:5a:98:12:e7:4c:20:a5:85:ed:e3:27:
         7c:c5:2f:1d:cc:7b:8f:88:46:71:2b:5a:0e:96:28:b4:73:20:
         79:8b:8e:44:fb:f3:f2:70:c3:93:a3:0a:65:dd:59:ab:fc:8e:
         ab:30:fa:0a:85:16:c5:67:3b:da:c3:0c:16:cd:6a:89:17:26:
         7d:54:7a:55:56:0e:b2:40:cb:fc:de:c6:4a:2f:fd:4b:49:60:
         8b:90:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----