Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File:                     2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier:          UECovPkStr5RImHgJn8ohxKbG70iGgqXJVeOJUUpvgA=
Subject key identifier:   3E:C0:1C:09:F2:81:5C:D3:54:02:DB:F6:72:CB:DE:3B:CB:90:AC:0E
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer:       /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial:       01962E61ABE42F0E636C7D005C104AD5B44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number:          0C2C
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: WwshShQEUizq8wqqIEVKej/bJswC4wKLlDcx1DCVG/c=)
                          2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
                          3: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:e4:2f:0e:63:6c:7d:00:5c:10:4a:d5:b4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=3ec01c09f2815cd35402dbf672cbde3bcb90ac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:49:60:f9:3c:2e:4a:ac:6d:10:60:3e:67:
                    91:05:2c:a6:25:4d:95:a2:08:55:91:df:4d:09:1e:
                    2b:6a:9b:56:13:3b:d4:b8:a6:64:7e:66:b4:34:ca:
                    06:c4:d0:b9:fa:71:ca:95:e6:50:00:52:91:d6:87:
                    19:68:18:22:53:88:3e:d6:bd:dc:86:fb:ce:ee:f6:
                    2b:0c:f0:f7:ff:65:cf:17:f6:a4:f3:f2:f5:a8:e0:
                    7b:1c:da:3c:19:b8:90:d9:82:bc:fc:8b:c5:7b:b4:
                    c1:1c:99:27:04:af:71:4b:18:df:7e:8f:8d:d2:82:
                    d9:41:46:ff:cf:d1:aa:f6:25:90:1d:1a:70:0d:23:
                    19:bd:db:e2:b5:7c:ee:80:33:74:44:30:35:39:19:
                    6d:57:cd:35:4d:2d:5c:0c:2e:37:aa:05:08:11:c4:
                    be:80:2d:21:f5:8c:2a:80:45:cb:05:16:61:73:23:
                    32:22:da:10:fd:dc:a7:c3:c1:66:95:c8:d7:f7:18:
                    c7:51:36:30:b5:3a:01:98:1a:c2:73:2d:a7:e4:8b:
                    62:ac:22:f4:d9:38:2f:3b:9d:f2:ef:2f:b3:58:2c:
                    ea:3a:11:7b:0e:fe:2a:a1:5d:8b:86:c6:a5:c1:8b:
                    ac:85:3c:06:3c:3c:d4:d6:0e:a6:7d:33:44:33:c9:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C0:1C:09:F2:81:5C:D3:54:02:DB:F6:72:CB:DE:3B:CB:90:AC:0E
            X509v3 Authority Key Identifier:
                keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f5:a9:db:27:20:97:aa:90:c3:fe:e8:fb:0b:eb:ff:9f:20:
         29:5f:61:a1:27:10:d1:09:9b:5b:fc:d4:ef:ea:39:8e:d3:45:
         9c:af:ca:63:4f:df:98:ee:7e:eb:9c:bb:b7:84:00:51:8a:d5:
         9b:e6:dd:98:51:b8:31:19:b8:8b:f1:4a:81:85:96:47:74:e9:
         0f:35:1b:5a:7e:80:f4:e0:24:70:82:65:79:93:27:bf:fb:8e:
         20:41:5d:e1:32:82:8a:a3:8c:e9:74:e7:c1:df:40:2b:1a:03:
         b3:03:99:b8:25:d3:a6:22:91:cd:7f:ef:4b:84:ec:2b:92:31:
         69:42:36:8a:46:b8:02:30:63:e9:0f:c1:18:46:88:1f:9e:20:
         df:9e:9d:57:c4:26:f8:34:6a:33:15:91:aa:b0:15:7b:82:9d:
         d0:b3:42:52:75:17:08:76:ec:5d:cd:21:b5:4c:e9:dd:86:82:
         b1:3d:61:43:ef:a0:92:7e:cb:97:df:4e:62:6c:cb:57:6e:5b:
         f5:3b:0e:f0:b3:5e:b4:82:42:4e:b8:a7:ae:69:ca:f3:79:b7:
         14:36:14:63:34:50:87:8e:79:f9:0c:b8:48:f1:5b:a4:2e:11:
         b5:00:89:08:85:f7:d3:7f:b0:3d:28:36:cc:48:b4:de:ee:1e:
         97:2a:c2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----