Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File:                     D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier:          t3Q/Pf/Or07qi/n/ZHsRhQBMZKE8ES0ExB6Vl7CXhRg=
Subject key identifier:   F4:03:CA:41:46:C4:E5:DF:B6:41:C9:D5:DB:C6:1D:6A:FA:3E:D4:B6
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer:       /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial:       01962ECFF5DC9F31500D21EDB7A495101F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number:          04D4
Signing time:             Sun 13 Apr 2025 11:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:42 +0000
Files and hashes:         1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: Nz7ZItla/ZhlqXBwTG5SLF/zJXWic42tRa4clYA1bbs=)
                          2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:f5:dc:9f:31:50:0d:21:ed:b7:a4:95:10:1f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
        Validity
            Not Before: Apr 13 11:01:42 2025 GMT
            Not After : Apr 14 11:01:42 2025 GMT
        Subject: CN=f403ca4146c4e5dfb641c9d5dbc61d6afa3ed4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:29:52:10:f4:36:b7:13:57:53:83:0a:cf:
                    8d:18:5d:15:29:03:a1:41:06:cd:45:3f:79:ab:e5:
                    7e:ed:82:86:05:04:5b:b3:95:41:ab:3e:4f:be:b4:
                    78:97:d4:76:77:3f:8c:93:4a:6f:44:df:5e:db:1d:
                    8f:2e:15:ee:74:89:53:71:34:5f:fd:fc:02:4e:c9:
                    19:f5:d7:80:28:ce:04:df:75:c5:5a:f4:3c:0a:c9:
                    c0:ed:62:ed:68:d7:ef:94:09:86:b9:5f:56:39:c2:
                    d4:78:0b:77:27:d2:5e:68:05:03:a4:11:6a:1d:fa:
                    4d:f1:c7:11:32:94:a3:6c:b5:1b:f2:85:d6:46:98:
                    9b:8d:c4:4c:d9:6e:a0:76:c3:2a:89:d9:66:52:b1:
                    69:b0:c3:12:22:62:51:97:e0:fb:bd:bf:1d:69:cb:
                    6a:de:a9:79:6d:d3:33:ba:dc:59:82:87:18:d5:9b:
                    e9:81:04:20:ca:f2:d5:0b:15:04:c2:f1:dd:68:2d:
                    6a:dd:2e:0f:10:d6:4a:5f:5f:e9:f2:a0:04:25:36:
                    8e:14:a2:3c:6a:0d:de:f7:9f:6b:36:f9:f0:98:85:
                    c8:df:87:03:8d:03:ce:f2:5c:9d:ff:d3:d7:62:85:
                    85:da:01:3c:36:41:44:5c:9f:cd:3d:39:6a:09:28:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:CA:41:46:C4:E5:DF:B6:41:C9:D5:DB:C6:1D:6A:FA:3E:D4:B6
            X509v3 Authority Key Identifier:
                keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:aa:7e:de:69:ae:64:a9:b6:bf:43:66:cf:c6:14:15:83:b8:
         06:fe:a6:69:62:15:06:00:61:af:1d:5f:6c:21:b7:a7:4d:8f:
         ee:8f:b7:05:55:ca:f1:30:2b:ae:e6:8e:12:ec:3f:22:6e:fa:
         05:d4:0c:6b:fd:56:c7:4d:b2:03:39:c7:7f:fa:04:45:4c:81:
         e9:bb:ce:53:5e:87:3e:4e:c0:0d:e7:5d:72:8c:40:2a:70:f4:
         f0:23:16:d9:19:2e:ff:47:82:df:3e:8d:31:b8:8a:2d:dc:1c:
         33:af:40:4e:8e:a8:56:ea:8d:72:98:47:78:8c:12:f2:0c:52:
         e5:2b:22:56:23:63:b7:4e:7b:20:80:2e:e9:d8:9c:bb:0a:03:
         e8:b1:63:58:54:b3:d1:d4:2d:8c:53:6c:94:e8:27:f9:3c:97:
         7b:2d:73:da:c1:3a:bb:91:6a:79:de:1a:7b:28:e5:73:49:b9:
         fc:fe:1a:64:b4:c5:ff:25:88:a9:fc:a6:d3:5c:af:c9:9f:83:
         22:b6:be:11:2d:38:c9:fd:fc:99:af:53:bf:82:53:39:14:c4:
         5a:3f:66:0d:89:c0:61:21:36:35:35:48:1b:56:25:49:18:d7:
         28:f3:fb:45:ca:fc:31:1e:fe:c7:a5:36:ac:4b:a4:83:54:ce:
         49:df:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----