Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File:                     RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier:          1zOoVJ/9FwkdBUJTuQBHbE8F03M/mgeDGtNQMsf5aVo=
Subject key identifier:   5C:D2:E3:9A:44:B7:14:87:B6:A7:AF:E4:91:30:21:AD:51:88:24:F1
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer:       /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial:       01962F747B0C4B9C3760599C25D1DC1C1697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number:          0CB1
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: crthdJB1YOQHnRO+Q5p6lcoEWie22uw1DLmhoQ729Uk=)
                          2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:0c:4b:9c:37:60:59:9c:25:d1:dc:1c:16:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=5cd2e39a44b71487b6a7afe4913021ad518824f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:d4:fb:6c:1f:7a:a9:f0:a2:ab:a3:20:be:
                    e4:8d:99:23:29:cb:7f:35:fd:e3:e1:3c:af:19:b3:
                    a8:f8:0b:88:51:7c:f5:98:fc:1d:6c:04:bd:64:f6:
                    b7:04:5f:23:2a:45:47:38:12:d6:96:b4:27:6c:c2:
                    f5:0e:56:34:65:81:11:5f:fa:0d:36:44:2f:2a:73:
                    6e:26:60:8d:47:04:9f:ce:39:78:f1:8d:88:bf:14:
                    74:b4:e9:31:48:dc:80:49:cf:a4:05:4d:2b:d2:c1:
                    b6:ab:94:2c:31:e3:6a:8d:aa:07:76:48:f4:4f:72:
                    b9:e8:53:85:03:bb:3c:e8:1d:e0:8f:4d:6b:3c:ae:
                    4e:13:6b:fb:4c:15:01:2d:f9:4d:f2:cb:e2:ce:04:
                    81:db:7e:39:84:45:ca:b4:9f:1f:d2:a4:2f:74:78:
                    48:d4:bd:35:8c:cf:b5:48:11:2e:4e:a8:cb:d4:e6:
                    a5:53:87:29:fb:21:1c:1f:fa:6b:bf:97:f2:1f:10:
                    c2:5f:6b:26:79:cb:fd:21:72:2f:30:41:06:83:4c:
                    6a:24:15:d0:5c:2d:d8:67:3c:a5:b9:bd:69:a0:94:
                    d3:61:e4:93:37:d1:ac:29:65:9d:76:f6:b4:3d:04:
                    1b:b2:ae:e4:3e:e5:ee:df:88:93:3c:b3:a1:88:40:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D2:E3:9A:44:B7:14:87:B6:A7:AF:E4:91:30:21:AD:51:88:24:F1
            X509v3 Authority Key Identifier:
                keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:d4:25:20:fa:f2:1b:ca:e3:79:47:35:3b:e4:ef:51:0d:
         1b:f1:76:5a:da:03:83:68:3c:aa:b5:a7:6a:4f:c7:91:75:af:
         e9:45:e5:df:57:02:23:88:0f:2f:d3:55:25:cc:f4:fb:e2:c3:
         4b:f6:a0:7b:47:e9:69:06:4e:cc:0e:54:6e:4a:18:e9:1b:83:
         7e:13:ad:7a:1c:f4:61:00:a1:c6:54:51:66:80:5d:77:8d:4f:
         d3:c6:c0:dd:02:18:65:71:c1:c2:3b:76:82:e6:8c:0d:82:46:
         42:b2:2c:b8:33:b9:c0:52:70:7a:41:d5:81:68:20:fd:c0:03:
         5d:ba:83:bd:bb:63:3e:3d:50:1c:86:6f:fa:f2:30:2d:0e:98:
         9b:2c:46:35:b7:ea:46:d3:2b:2f:55:83:97:b3:a5:e8:f5:57:
         44:b9:3d:33:14:6f:04:83:ad:ee:b7:03:c6:66:21:81:bd:05:
         6d:96:38:9e:67:ee:ba:91:be:dd:4d:26:68:ae:27:9d:3c:8e:
         c6:33:a6:a0:d2:6a:04:db:ff:68:63:7f:d0:62:fe:f8:ad:63:
         13:54:de:ca:4a:20:16:ce:ba:f5:8f:b5:52:31:07:09:b6:04:
         3b:58:92:9a:27:00:86:51:9b:90:5a:2b:9b:05:2b:08:25:7f:
         e2:fe:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----