Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
File:                     DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json)
Hash identifier:          nyApd7KEadLHOdIDzQhD4+7PrbP374oWwu3fedjfaQI=
Subject key identifier:   FE:DC:F9:5F:74:7E:EE:D9:98:FB:08:C8:74:5C:F8:61:D7:3C:11:EC
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Certificate issuer:       /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial:       01962ECFCB76FAB6F234BCA2EE1393302505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
Manifest number:          1498
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: e2R733bWjInUIDcdsNcWSDr/pBb22oTR8JLflXyUOZs=)
                          2: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (hash: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=)
                          3: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (hash: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=)
                          4: _Sk86eGU6RbYb2vHgW0Ui6wMfs0.roa (hash: Avs1rLJgkMJRxv1FINcH2aH5zw28kBN1QbSOsvT0vZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:76:fa:b6:f2:34:bc:a2:ee:13:93:30:25:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=fedcf95f747eeed998fb08c8745cf861d73c11ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:e1:ab:31:37:69:43:85:95:d2:fa:f8:88:
                    69:e6:50:11:50:c9:15:fd:3f:ee:f8:ee:90:e5:3a:
                    6b:ff:9a:ae:b0:52:60:63:fe:b8:59:55:24:f8:4e:
                    d6:12:4a:2d:8b:77:95:0f:9d:ea:2a:2a:2b:16:5c:
                    ca:71:2e:12:16:3b:2b:b4:7b:b0:27:8a:ef:da:97:
                    d6:e1:c6:3c:9c:e9:19:9b:98:63:e7:8b:1f:ad:fd:
                    65:46:f0:3f:e4:6c:42:b1:ef:86:c8:63:e1:bb:6b:
                    71:41:f8:44:6c:fb:37:ef:75:d3:ba:50:0e:c7:be:
                    56:2b:0e:d8:06:84:e1:c6:2e:eb:a0:37:51:27:ff:
                    d9:7c:fc:bd:f6:23:77:62:26:a0:65:1e:b5:91:0d:
                    8c:23:bd:02:ae:05:4b:8d:02:5d:2f:a3:28:d3:ff:
                    be:37:af:f5:78:f5:e3:36:bb:44:15:11:9c:32:8e:
                    a1:09:51:04:9d:32:96:18:4f:35:63:c0:3f:f1:55:
                    df:e7:b4:94:01:eb:73:47:f2:ba:99:c0:2e:96:0d:
                    7e:f5:d2:ac:af:53:85:32:79:c0:98:6d:93:3a:67:
                    43:6a:17:31:c0:be:18:d3:7e:ca:f7:b0:e6:3f:a3:
                    58:49:d2:4e:ac:97:79:ea:02:ba:bc:a7:80:1a:19:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:F9:5F:74:7E:EE:D9:98:FB:08:C8:74:5C:F8:61:D7:3C:11:EC
            X509v3 Authority Key Identifier:
                keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:a3:5d:6c:d4:1a:97:dc:c6:40:ac:ec:64:34:a5:47:6a:
         0c:19:53:48:c9:44:8c:fb:2a:ab:2d:9a:38:05:1f:41:84:56:
         0f:c6:60:6b:db:aa:ed:af:c8:88:71:19:69:b5:5a:48:f7:63:
         41:3c:8f:64:ca:c2:1e:2e:4e:5c:98:70:ee:9c:97:1d:98:c5:
         45:75:6c:62:a6:bd:2d:bb:cb:15:34:31:d9:bd:dd:e5:f8:de:
         c6:3c:d5:aa:84:25:53:a9:35:f1:ea:a8:8f:ec:41:76:e5:d4:
         5e:c9:19:3d:dc:c2:e1:6e:96:ea:99:21:e7:bc:38:1d:1f:e0:
         48:66:42:ed:89:70:9c:33:f5:87:14:8c:a6:2d:54:df:10:8c:
         e2:54:49:35:02:16:6c:41:ca:11:8d:8f:6d:68:69:28:f3:0f:
         5d:fb:88:b9:31:3e:d3:97:a0:b7:41:16:64:6b:e2:44:91:99:
         74:54:68:c6:98:11:d4:56:f0:65:8f:8f:56:2f:27:00:e9:e2:
         f3:61:dd:b5:7e:47:cc:b5:8a:5f:d5:9a:99:ba:6e:ea:08:8f:
         ca:08:8e:bb:5d:b3:fa:e2:57:28:00:a3:76:82:85:7f:64:9e:
         22:6a:1d:b2:67:05:a2:fb:3e:a1:70:bd:c5:9c:c4:73:21:d1:
         da:4b:3e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----