Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File:                     1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier:          5Fp0I5UsQ8bQNwr+h72lMy7TBdlpgvEvhu842Z6qWro=
Subject key identifier:   F3:23:10:09:6E:E2:29:C1:FC:77:E8:10:BC:42:BB:62:67:F7:43:47
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer:       /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial:       01962F3D46A8481B5D857CFD26D0C50EBFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number:          013E
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: m16sO2AU/m82Sluy/QkXNNwizABYaCpQvOigwiHZJ7g=)
                          2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:a8:48:1b:5d:85:7c:fd:26:d0:c5:0e:bf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=f32310096ee229c1fc77e810bc42bb6267f74347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:cb:9e:91:10:aa:25:0b:f0:a3:63:6e:d9:
                    50:e2:98:40:79:32:71:94:f4:1f:c4:34:dd:95:3d:
                    a2:67:2c:6c:2f:b3:6b:ed:2a:a7:63:73:12:40:c5:
                    23:63:ac:31:6a:a5:59:a2:c0:75:7f:2f:58:a5:8a:
                    74:e5:e3:7d:79:41:1d:be:1b:67:a6:a6:74:86:4f:
                    1b:cf:e6:4d:8d:3a:9e:82:aa:30:9a:d6:5a:69:53:
                    c9:36:ca:f5:ea:b6:00:f7:f2:84:78:e9:9d:ad:be:
                    14:20:ea:a3:25:a9:d2:87:32:fc:63:b8:94:90:5f:
                    6c:62:7c:b9:29:5d:df:ad:44:d8:e3:99:1e:ae:e7:
                    18:b1:86:6f:8c:19:ae:27:a2:c1:39:bb:94:5f:bb:
                    e2:da:c7:2f:c3:ed:50:a4:51:73:96:1f:a2:97:67:
                    b4:d2:3d:03:10:cb:00:04:fb:fe:3d:ad:1e:4b:27:
                    cf:93:3b:9d:8f:5f:70:b9:cd:74:5f:ea:c1:a4:af:
                    04:74:de:4b:93:72:55:15:c0:e4:5f:21:60:4a:b5:
                    fe:da:5a:6b:64:64:70:4e:99:d7:02:74:03:55:c8:
                    ee:50:0e:60:43:e2:c6:92:1a:bf:a8:2c:86:ef:83:
                    8e:33:a4:e9:fe:11:d6:7d:03:9a:e7:4d:a0:46:d4:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:10:09:6E:E2:29:C1:FC:77:E8:10:BC:42:BB:62:67:F7:43:47
            X509v3 Authority Key Identifier:
                keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:54:ea:0d:22:84:4c:e0:72:26:78:5f:e5:16:de:83:73:97:
         2a:73:22:aa:a7:fc:69:6d:1f:93:75:7f:4e:80:d9:9d:70:2a:
         55:ef:4a:6a:e7:66:f5:05:5b:e6:f0:41:f2:1c:bc:92:13:aa:
         39:b1:2e:d0:02:c7:c7:6d:3a:39:b6:6b:77:ed:29:b4:f2:66:
         65:15:d6:c2:94:3c:5d:c3:a9:50:d8:95:58:7a:44:1d:fe:3e:
         21:23:65:5b:c6:29:16:b6:f2:11:cc:51:dc:d8:e5:53:b5:50:
         74:25:09:8c:38:e4:8b:52:1f:e5:e2:88:a5:49:ba:e7:91:03:
         c9:d0:bc:65:4a:77:18:df:7f:ad:97:ec:6f:66:fa:94:27:fb:
         38:e7:30:71:bb:35:e6:79:99:fe:e4:1a:ea:81:f1:f0:82:17:
         4f:fb:f0:97:e4:56:b8:63:28:ac:9d:6b:c7:8b:05:2d:b0:d7:
         93:78:2b:12:04:cd:91:83:da:eb:a4:76:92:6f:7b:fa:ac:0a:
         f5:b5:92:d4:da:5e:be:5c:39:87:b5:89:6c:15:75:2f:af:6f:
         1e:2f:4a:6e:71:f1:60:e5:15:5e:32:c4:4c:bb:8b:80:05:c1:
         04:83:79:70:de:aa:ae:d5:7d:fc:bc:3e:1b:0c:5b:8c:35:83:
         cc:b9:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----