Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File:                     DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier:          ikoRdMXx341sod9u9WuiaJ6uNUhZON00b97E11XbBpQ=
Subject key identifier:   19:B3:D4:3E:4B:B8:22:07:2F:C6:08:9F:28:AA:47:20:16:AF:9D:81
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer:       /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial:       01962F74AF38FAF85806C2F0E79BC8D665F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: qjxFilVvZFgX7Rw5UeB8JoYonU/dxngScLXYxmjYqRY=)
                          2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=)
                          3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:af:38:fa:f8:58:06:c2:f0:e7:9b:c8:d6:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=19b3d43e4bb822072fc6089f28aa472016af9d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:99:de:4e:20:6b:34:73:7e:4e:88:b0:18:
                    1d:f6:a8:86:2c:a4:a7:58:ae:a2:90:de:02:66:63:
                    28:c6:2b:b0:ad:9c:80:6c:e0:6b:53:ed:3f:45:1c:
                    99:37:84:a1:90:ce:14:00:8c:2d:f8:f4:dc:fb:28:
                    9e:3f:f5:17:dc:57:b3:c3:82:21:40:d0:07:8c:6d:
                    a4:8a:f0:bf:71:3b:37:08:f0:aa:8e:68:b6:83:1f:
                    9d:93:82:05:56:ee:da:11:96:e3:d4:da:13:fb:70:
                    f7:0c:be:03:fd:f3:53:ab:60:b6:44:57:d5:57:bc:
                    b6:a1:76:81:63:2c:8d:f9:e6:bc:67:8f:3f:72:49:
                    33:cf:d1:80:68:6f:68:dc:f3:31:01:3a:7c:cf:6a:
                    ef:58:eb:2e:03:a2:39:60:74:43:e3:27:89:06:f0:
                    50:5f:80:a6:62:ea:8a:24:cd:ec:ab:82:ba:d9:8d:
                    d0:35:8e:de:63:9e:6e:bc:42:20:09:86:33:3d:de:
                    fc:cf:01:8d:e1:97:ed:5d:04:9b:6c:71:e2:c1:68:
                    14:52:be:88:b2:da:5b:1e:e2:79:1d:bb:e9:51:0e:
                    3c:3d:fe:27:a6:e8:ce:c9:05:02:52:c8:4c:d2:00:
                    f9:96:30:0f:37:3f:56:59:70:eb:fb:bc:66:35:a8:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B3:D4:3E:4B:B8:22:07:2F:C6:08:9F:28:AA:47:20:16:AF:9D:81
            X509v3 Authority Key Identifier:
                keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:02:09:5c:48:66:7e:69:b3:a4:6f:70:d6:e5:44:d6:69:
         c1:02:90:9b:e9:b3:17:59:7e:f4:2b:42:4e:ba:79:00:84:6d:
         1c:13:55:ff:c6:fb:2b:0b:d4:c0:a9:b4:a8:46:3e:56:73:8c:
         9b:55:2f:09:e9:d5:61:e7:9b:b8:e7:20:f1:67:84:63:a3:60:
         d7:9d:53:97:1a:5e:c4:97:88:58:3b:a5:43:85:aa:67:69:1c:
         34:c2:a9:3b:82:80:95:e5:03:44:bd:a0:c5:8d:2e:df:c8:4b:
         18:02:20:f7:53:9f:3c:fd:ce:e7:93:75:08:e3:95:68:79:6a:
         b1:df:a9:18:9e:9c:6a:5e:6e:cf:2a:8f:af:62:00:6f:b3:80:
         ae:8b:57:0d:d7:01:fd:27:1b:b2:18:4f:06:3c:13:f5:c5:51:
         72:18:47:fa:50:ad:54:e4:8c:b2:31:54:bd:e1:ca:c6:ed:14:
         00:e2:4f:cd:f7:e2:34:88:74:6c:f7:c7:95:d6:d4:d0:98:ba:
         cd:22:5d:64:8d:cc:bd:be:3b:5c:4f:09:af:07:c2:02:60:07:
         85:d9:7f:96:f0:72:25:1e:6e:0f:ec:db:24:40:64:c5:35:50:
         85:9a:72:65:dd:e6:55:a7:76:6e:ee:b0:26:fa:1a:a3:1e:30:
         47:36:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----