Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File:                     0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier:          /xWvE+IWo9QMyE33Irotfp7ZzWZTRommO5sfEux5+Dc=
Subject key identifier:   8A:E1:F1:B7:A2:9F:04:ED:84:E8:F2:E9:3C:46:A4:6D:EC:04:29:13
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer:       /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial:       01962F74858C702B53955E59A65D80FDE705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: rd9ix94cwXmW+FSo9yda+OwZknK4iJeclOiLL9kwk/0=)
                          2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:85:8c:70:2b:53:95:5e:59:a6:5d:80:fd:e7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=8ae1f1b7a29f04ed84e8f2e93c46a46dec042913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:64:aa:7d:61:b9:ed:c8:63:37:ed:ee:19:
                    d1:1d:a7:33:25:0e:98:e7:e7:14:c8:10:a6:5f:f4:
                    06:93:81:c0:1a:10:21:d7:8c:d5:a0:7e:9d:7e:4b:
                    c2:5f:31:f0:f9:26:e7:a0:c7:f2:73:01:d3:21:43:
                    19:64:ff:9e:c1:c0:33:df:2c:d5:54:05:d5:c2:59:
                    2e:00:b9:40:b3:18:53:bd:6f:72:20:0f:46:0a:97:
                    1a:b0:6d:11:26:08:a8:78:ca:e3:4b:e1:d0:ad:e7:
                    f4:31:5f:07:91:7c:29:b3:16:30:0c:24:4c:2c:59:
                    ff:99:11:87:e0:c7:42:c7:a2:54:50:27:81:4f:fc:
                    7d:ae:36:21:f8:b4:e1:a2:08:6d:a4:d6:ca:05:a7:
                    1a:86:c8:f2:6e:a7:dd:fd:7d:d7:60:68:d0:bc:7e:
                    2e:90:ba:a9:70:08:23:ca:f1:de:eb:c5:53:5b:c8:
                    1e:54:35:5a:a4:ab:21:a6:23:ab:56:4c:52:3b:a8:
                    35:3e:14:56:31:58:86:e5:83:6b:66:48:ce:2a:b7:
                    0c:80:87:99:12:73:d4:fb:e8:a2:51:25:4c:1f:69:
                    ca:93:e7:cc:31:0d:e8:87:5e:16:e5:a7:c0:08:47:
                    6c:a1:7c:f1:a4:ff:59:d5:df:99:d7:9a:1b:f9:c0:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E1:F1:B7:A2:9F:04:ED:84:E8:F2:E9:3C:46:A4:6D:EC:04:29:13
            X509v3 Authority Key Identifier:
                keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:f4:49:3a:01:99:78:94:65:24:45:f4:2f:32:ec:3a:97:
         39:3a:58:16:9d:20:5a:b6:ca:b6:c9:c2:e4:50:3f:c4:4f:b4:
         65:b1:df:37:d6:9b:a9:3d:f8:c4:cf:33:0b:ea:75:22:bb:eb:
         90:e4:9d:92:52:e9:04:fb:96:9a:4e:52:bc:13:0c:a6:2e:4d:
         3a:f0:f4:fa:4b:ec:db:d9:67:67:fb:9f:df:e4:00:30:ed:9a:
         a7:a4:37:6b:6a:d0:bd:f3:5f:53:fe:3d:ea:d3:6e:34:59:98:
         11:5f:9a:e1:af:51:5c:ec:a9:32:be:6c:c6:5c:87:6d:75:60:
         a3:f5:75:df:12:ee:03:bd:a0:0a:bb:8a:17:ff:5f:48:9b:f0:
         e3:d6:90:b3:7e:1d:7a:22:b4:bd:2d:39:02:7a:24:65:f0:71:
         30:ff:d6:7b:d3:07:b8:90:17:77:7b:24:1c:a6:7f:8e:e6:b6:
         a3:ad:e5:b3:c8:c1:c9:b7:30:ee:02:fc:e8:a5:2c:40:43:e6:
         ec:ff:79:a4:38:f5:9c:25:28:fb:5a:88:9c:57:06:27:e2:c2:
         a9:67:25:94:3f:13:03:76:05:7f:08:0c:ee:bd:e2:7c:e2:f0:
         66:5c:84:31:26:56:15:a3:19:58:ab:df:ff:c0:c5:5e:93:ed:
         24:97:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----