Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          1H6/laZcN+8+iIcIereUfVn4swMSisylCc1tOeucI2k=
Subject key identifier:   F2:18:45:B3:A5:C2:0D:27:EF:32:4B:6F:72:CF:2B:4C:67:91:77:07
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       01962F3DCCFB2EF1B113027D115D7D8AD74C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          1000
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: 8SYGthFo/fwK7Eq76eZB98+3YJ/7JzOV4klj611ixMA=)
                          2: jM6ObOeKnGJ-XMKGH2l4W5ZCd2A.roa (hash: KTQ2TAHXzAzojs4IsYPpcpBSdUKcZYE1gqliIFvrHcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:fb:2e:f1:b1:13:02:7d:11:5d:7d:8a:d7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=f21845b3a5c20d27ef324b6f72cf2b4c67917707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a6:6a:88:74:8d:fa:8a:5d:4c:f3:0c:d1:1f:
                    89:f2:39:2b:66:1a:12:7b:f3:92:a1:12:4c:ce:06:
                    02:64:08:fb:e5:2d:cc:a6:82:70:51:c1:14:cd:87:
                    43:d9:04:b8:67:53:f7:fb:6d:2d:4d:46:a6:78:8d:
                    55:22:d7:83:01:e9:02:b1:e6:12:15:5b:d2:cc:eb:
                    03:1e:06:47:05:3b:8e:7c:68:e4:06:a0:aa:87:be:
                    fb:4b:14:12:bb:8f:b1:99:90:99:4b:15:1d:fe:6b:
                    0a:56:b4:8a:3c:5a:a6:19:ed:8c:9d:f3:a1:01:60:
                    9a:9f:c4:ad:0d:88:9e:9b:ed:57:f2:1c:fd:cb:ae:
                    01:6f:a5:28:91:a8:14:69:20:72:c2:22:0b:3f:54:
                    c6:ed:ef:f4:f5:54:bc:84:a1:a9:6d:99:b9:d6:f3:
                    06:62:56:5a:22:7a:7e:cb:b6:5f:e8:8d:2f:3d:fa:
                    03:b8:3e:77:e7:f0:54:ad:36:1f:fb:18:b9:66:f9:
                    fa:f1:ee:fc:72:09:2f:fd:2d:c6:aa:4a:f1:ee:c1:
                    47:7a:f6:5a:65:f6:4d:ff:b6:1a:8b:31:4f:e0:32:
                    6f:77:0e:80:31:34:9f:15:05:75:93:fa:7e:8c:32:
                    aa:19:31:03:05:48:3e:e3:c4:dd:68:01:a0:cc:4a:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:18:45:B3:A5:C2:0D:27:EF:32:4B:6F:72:CF:2B:4C:67:91:77:07
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:bb:c0:1f:84:d4:d3:a0:a1:38:77:b4:02:0c:93:8e:18:
         83:e0:9e:3b:68:4e:25:de:53:30:4b:a5:3c:f1:5f:78:8b:cb:
         c3:45:d2:d6:02:bd:b9:74:a4:a1:eb:13:79:2b:d0:22:64:29:
         ec:68:5e:a2:c0:ef:91:2f:93:7e:e7:7d:e2:8f:bb:7d:f5:0d:
         1a:90:b1:f0:65:44:84:61:a4:4c:50:c0:e4:f7:04:f5:c7:3e:
         d5:b0:d6:0a:ea:fb:25:0d:a4:a7:63:5e:f7:d8:0e:52:7b:a3:
         69:37:41:c8:3a:55:f1:58:b7:ce:1f:ec:01:e6:38:2f:fa:44:
         50:c9:5a:75:28:ba:22:26:fb:db:43:46:63:6e:0a:bc:f7:52:
         42:40:99:e7:47:a7:93:c7:89:53:c0:f8:f6:0b:fd:99:60:97:
         13:f0:19:20:91:f7:3f:5b:d8:87:cb:1c:ce:ad:22:30:37:99:
         fd:53:60:68:e5:7b:af:d8:dc:e2:dd:6f:a2:9b:52:50:5d:71:
         90:98:78:f7:f2:e9:35:3a:d9:f0:58:1c:63:30:7d:59:65:96:
         b5:ee:ab:95:1f:6a:91:c1:19:23:af:a4:d1:81:8e:9e:d1:ed:
         cb:be:a1:64:bd:4a:b0:8a:92:42:b9:85:f8:4a:0b:7e:a2:90:
         01:85:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----