Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File:                     DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier:          buMpVT98b5ZTs2INOfF8JcrUF7M9junoIGSxr6mN8RM=
Subject key identifier:   D7:9B:41:61:90:3E:41:94:6F:34:BB:9C:0F:61:82:26:B4:B3:AA:7D
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer:       /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial:       01962F7435258BBAE0CBC8E3516FC5671E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number:          0791
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: SspXOwnkGaRwKU093av/9FCq4JTo8euSFzI+cytritU=)
                          2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
                          3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:35:25:8b:ba:e0:cb:c8:e3:51:6f:c5:67:1e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=d79b4161903e41946f34bb9c0f618226b4b3aa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:1e:0e:ff:e4:19:12:fc:53:6d:55:24:17:
                    6c:02:fd:9e:2a:71:e3:72:eb:6f:5c:aa:ba:26:21:
                    2d:7a:96:17:0a:09:c5:fa:19:38:26:2c:06:14:8f:
                    26:5d:c4:ef:bd:08:f5:b3:db:eb:9a:43:17:9b:6b:
                    d2:cb:ac:50:21:38:1b:4f:93:a1:85:5f:89:a8:ed:
                    4e:50:22:96:52:62:d8:6f:f7:7a:ff:5d:f1:aa:04:
                    9b:48:b3:af:8d:09:4b:8b:b4:0d:fc:c7:03:66:46:
                    1a:da:82:76:25:7b:e4:86:7a:75:37:b3:20:d8:a5:
                    92:3b:1f:8c:56:ad:7b:2c:7e:d7:99:15:0d:57:62:
                    ed:1a:3c:86:e2:ea:77:52:f3:d9:c4:77:86:f4:7e:
                    df:82:3f:03:f0:ff:c1:a0:e2:ee:e1:c3:a5:4f:dd:
                    64:26:7e:8c:d6:93:74:9f:52:4e:0a:93:a3:76:35:
                    3c:5d:18:1f:00:18:ea:39:49:5b:7b:33:62:4f:ad:
                    2c:5c:d1:a7:db:a8:b9:e6:d1:98:61:5f:d0:82:30:
                    c3:08:28:8d:09:cd:dc:69:e0:d3:66:0c:47:cb:63:
                    87:c7:2a:3d:7f:e7:35:f7:21:c1:ca:f9:97:b7:4d:
                    95:61:aa:98:cd:53:4f:b9:30:e0:0a:38:0f:7f:64:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:41:61:90:3E:41:94:6F:34:BB:9C:0F:61:82:26:B4:B3:AA:7D
            X509v3 Authority Key Identifier:
                keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:1b:9f:e7:6c:4c:95:7e:2d:cf:6f:da:4c:62:5e:21:4a:
         8b:1d:1d:da:6c:47:f4:bf:67:62:88:de:1c:24:27:eb:39:9f:
         6d:11:96:55:5b:00:de:7d:fc:6a:c7:83:e8:e1:8f:af:ec:11:
         48:de:59:6c:ba:60:94:b1:55:c9:e5:97:b9:c2:40:81:3a:15:
         34:a5:96:d8:af:28:ce:3b:44:02:91:4b:ee:49:91:14:41:38:
         72:5a:aa:0c:93:66:af:61:6e:ac:64:5b:9d:31:a5:ab:2b:83:
         c1:92:a7:2b:81:c1:ed:d4:01:0b:95:c2:e9:60:d6:11:ab:13:
         a8:5c:2c:5d:09:76:24:82:98:d9:f6:b2:3e:c7:3a:da:8f:4b:
         a1:e0:22:e3:28:a3:b8:6b:91:56:7c:33:f4:77:b4:c0:40:e9:
         78:42:71:02:ab:23:c9:29:2c:e4:2c:f5:7c:2b:34:83:ff:2c:
         a4:c7:45:8c:f8:c2:bf:6c:3a:bf:ab:08:00:84:22:68:99:6a:
         af:58:a1:81:74:a1:95:6c:e0:58:d3:7e:25:a6:32:2a:7e:c8:
         76:b1:c4:12:ed:c6:16:00:1e:8f:57:08:88:a2:ca:dd:87:b1:
         e6:1d:89:7b:f3:6f:59:33:09:37:01:8e:8c:ae:d2:67:26:88:
         9d:38:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----