Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File:                     1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier:          gW+zv/y3ssB4P6ZViNHFVDvJVqBoWsgyseetG7HVmk8=
Subject key identifier:   B7:9A:DF:49:D3:65:D0:20:EC:0E:BF:1F:C7:E4:36:08:46:0E:0E:6D
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer:       /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial:       01962F0712F9E581BC5DFF2D01915B193B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number:          07B7
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
                          2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: QbePRSp93V1ShI+ho/ulypxFfEaAEuIg+42SpIln8Ko=)
                          3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:f9:e5:81:bc:5d:ff:2d:01:91:5b:19:3b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=b79adf49d365d020ec0ebf1fc7e43608460e0e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:48:6b:64:a7:5f:d3:c3:d3:94:1d:66:47:
                    f7:73:bd:99:d3:94:ed:c6:0a:27:74:f1:86:d8:f6:
                    f1:cd:4f:3a:15:5d:fe:06:c2:a7:96:12:c8:a5:e2:
                    6e:78:11:f8:9d:2c:a5:82:5f:36:60:fd:48:b4:36:
                    be:66:c5:84:b1:41:b6:f0:f8:48:b7:73:e3:e5:a6:
                    8f:27:25:53:1f:11:8a:ff:90:e4:f7:2f:b9:ab:b2:
                    2e:e2:8e:47:99:39:73:98:55:72:88:af:ff:aa:27:
                    55:1f:61:a6:0b:c9:87:f6:25:e6:2a:23:8f:38:0a:
                    99:19:86:8c:da:b0:95:42:d4:e3:a3:f8:6e:44:b8:
                    1a:a1:f0:db:44:35:b9:bb:7c:be:e2:50:e3:7b:8b:
                    44:6f:33:d3:d4:e4:7e:16:2c:92:f2:05:bb:f8:4a:
                    36:91:36:cc:63:9c:66:3e:a3:60:37:93:af:12:c1:
                    e0:0e:a2:6c:3b:57:ab:57:87:59:76:db:82:9a:33:
                    e3:72:57:8c:4b:ba:59:1d:df:06:3d:f0:11:17:40:
                    47:88:02:85:c1:d6:a6:a9:e0:7a:d3:0c:73:a9:82:
                    d9:07:8b:68:ba:cd:4b:14:44:32:48:e3:56:72:f6:
                    9d:90:a4:7a:19:6c:20:c7:04:e6:bf:00:66:63:ea:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:DF:49:D3:65:D0:20:EC:0E:BF:1F:C7:E4:36:08:46:0E:0E:6D
            X509v3 Authority Key Identifier:
                keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:39:7d:04:55:67:fb:0b:bf:a6:de:40:6c:5a:c8:6c:bd:a8:
         8b:ec:8f:b4:45:11:a1:27:77:9a:aa:fd:5c:09:e4:ce:b1:88:
         53:31:22:55:ac:ab:14:f0:58:16:27:09:40:4a:d9:11:0c:d0:
         5b:9c:b2:01:a5:af:55:ac:84:58:71:61:9d:86:72:05:62:bc:
         36:9b:40:f6:c8:74:71:e9:60:ef:5d:f6:46:c6:4a:0b:1d:81:
         4d:bb:c7:31:52:1b:63:04:36:de:c9:cc:eb:6a:3e:72:2b:7d:
         bf:57:d8:65:7d:a5:12:14:14:2e:db:51:31:a4:b5:1b:91:05:
         53:9d:a7:b4:77:ad:77:63:3d:c4:8d:30:4f:01:ab:a0:bb:41:
         0b:7c:96:ef:54:b1:ee:c4:b1:4f:84:60:32:44:4d:a6:53:0d:
         41:96:c8:67:8e:3a:3d:b2:d1:cf:83:79:5f:44:a8:51:0f:94:
         fd:be:6c:69:3c:73:58:6e:4e:6a:1e:ac:69:57:98:e1:84:c4:
         7a:19:6b:57:df:be:81:70:4f:4b:24:99:df:3a:2c:1d:32:37:
         c2:85:d8:7f:d6:24:d7:68:f7:59:c8:59:de:bf:26:05:70:a1:
         0b:d8:76:e3:b6:95:d0:b7:f1:b2:51:57:2b:09:04:45:8b:a9:
         db:9a:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----