Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File:                     23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier:          FrYjnyI+udMkkD7MWyy7XaFfFCTe8ZwddUngIaruhH4=
Subject key identifier:   0D:63:93:0A:14:01:75:DC:DF:32:32:C2:B2:BF:28:87:31:97:11:FE
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer:       /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial:       01962F743CA3596E0D77B4496EEED9B16D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number:          119C
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: Jx19PqW3iFjk35w2P7Go3IWu7s4kxjbbCE6kn95d+HM=)
                          2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:a3:59:6e:0d:77:b4:49:6e:ee:d9:b1:6d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=0d63930a140175dcdf3232c2b2bf2887319711fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:2d:8f:49:9e:51:54:83:45:a9:bc:be:1b:
                    7b:c6:db:f3:62:c8:03:a4:44:27:58:0e:5f:36:4b:
                    e6:32:7a:38:b6:42:b1:8a:33:e8:8f:49:a3:ed:2a:
                    61:6f:c3:ce:98:e2:08:83:dd:fa:fe:0c:b9:6d:33:
                    01:b1:91:10:84:8b:30:7f:86:b9:d8:b7:40:a3:31:
                    75:bb:3f:8d:ea:0b:65:b4:28:4c:54:86:bc:64:df:
                    ab:49:35:c0:ca:7f:df:3c:7e:88:f4:3c:3a:cf:0d:
                    7e:f9:2d:ac:d8:b7:28:11:c5:14:07:69:cd:df:3e:
                    19:de:8f:f6:9f:a5:15:47:2d:5b:d0:83:7f:e2:d1:
                    2a:c0:a2:98:85:c7:d5:0d:da:72:23:ef:63:9e:53:
                    88:46:5d:3a:04:f6:8b:20:21:70:fc:8f:18:60:83:
                    ee:28:0b:c3:70:00:63:87:81:e6:e3:47:e8:81:ce:
                    5d:f3:fb:d1:6a:c4:b9:40:e1:2b:59:3e:56:51:1e:
                    07:5f:85:2d:1b:40:f9:68:93:3f:6e:61:29:7e:60:
                    8a:a4:3a:d9:8a:1a:70:a6:f4:0d:7a:83:63:77:c3:
                    f1:e8:ce:c1:e2:77:41:54:68:fa:1e:b3:15:6a:16:
                    5d:7f:1e:f9:c2:8d:10:60:3d:2d:39:91:86:a0:6a:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:63:93:0A:14:01:75:DC:DF:32:32:C2:B2:BF:28:87:31:97:11:FE
            X509v3 Authority Key Identifier:
                keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:06:0d:15:74:d6:5b:30:af:f3:de:63:5d:3e:c2:81:a3:
         b3:31:8e:88:59:36:4b:d8:8d:c0:a9:c6:3d:38:7a:fa:43:be:
         0c:76:da:91:36:d2:6d:55:3c:1d:2b:2c:f3:41:98:e0:72:86:
         21:66:d4:0a:b0:68:2e:94:e0:46:6b:3f:11:2d:e6:f1:9c:02:
         42:dd:df:9e:ce:bb:21:a3:dc:33:11:19:65:26:ce:9e:ae:ac:
         67:64:a4:b0:93:2b:b4:c7:83:98:36:72:3e:a5:89:02:d3:aa:
         2e:6f:04:64:59:83:17:f9:bc:43:4d:2c:ad:90:2a:1e:a7:8f:
         5c:7b:70:b2:9b:64:8b:f3:27:83:e2:f6:d0:47:ea:73:04:5c:
         5a:bf:ee:47:11:81:ad:97:36:ca:46:76:5b:ed:34:c7:3b:cf:
         95:60:2f:89:c5:95:b5:66:cb:8c:94:3d:fc:da:f3:2c:d4:c4:
         9a:7d:cf:42:db:50:47:52:71:7f:e4:fa:d9:36:1b:f3:d0:45:
         69:69:36:ab:b7:15:a3:59:e4:c9:39:8f:d9:d5:66:fc:77:68:
         b6:cf:2a:c3:60:b9:a7:24:17:1a:3a:d4:0f:57:cf:10:04:b9:
         4d:0e:e2:5e:b0:47:74:7c:62:35:30:7b:75:0b:7f:ee:47:9c:
         57:04:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----