Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File:                     rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier:          4ab1TuEb07C4uORs+aMdExVdgwW1s/Lfei4KlKII5hQ=
Subject key identifier:   2E:C6:5F:C8:11:40:E2:32:E4:FF:22:B9:13:67:A4:A8:C6:3E:FF:C3
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer:       /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial:       01962E993300FA0EC2563F9AB3CB7925002A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
                          2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: U3SoiH/AKE2h10Id9NbYJGNxDW3SwNyPvztvYSrnUCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:00:fa:0e:c2:56:3f:9a:b3:cb:79:25:00:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=2ec65fc81140e232e4ff22b91367a4a8c63effc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:ff:5e:4c:81:aa:68:1b:6b:f7:04:1d:64:
                    ca:1a:a4:ce:26:b6:d3:34:19:d0:b7:35:35:2b:45:
                    74:82:47:63:d1:64:b1:bc:02:0e:40:ad:66:e5:b9:
                    08:8c:20:9b:f4:4a:a4:96:57:54:5e:e7:46:cf:cf:
                    d9:c4:b4:6a:c7:a7:c3:c0:0e:2b:52:1b:32:51:6c:
                    40:a5:06:d2:bc:82:d3:9e:a1:a7:bd:64:5f:f9:c3:
                    5c:09:6d:e5:38:95:cc:9c:e1:d1:a0:be:1e:49:b2:
                    b7:a5:e0:cb:4b:d3:44:bf:d5:39:da:da:15:c4:98:
                    6c:3c:2d:0a:f0:c7:e0:6f:8a:27:83:5a:2d:e6:0e:
                    35:a0:ba:fe:ff:9b:2f:ab:7e:fe:21:56:7d:d2:0d:
                    56:aa:1a:53:29:ae:f1:5f:81:ec:bd:fa:7c:c6:1b:
                    3d:74:d6:6f:ef:4a:8d:2f:59:78:24:4a:82:00:5e:
                    09:28:0e:f1:eb:04:f9:aa:94:2a:96:63:aa:18:51:
                    bf:a8:fa:e4:34:b5:4b:76:0d:93:94:1e:89:10:37:
                    04:e4:33:fa:c7:08:18:6f:4a:c7:3b:f2:dd:4b:54:
                    d5:8a:1c:5a:4e:ff:51:1e:7b:2f:b7:32:23:11:60:
                    00:b3:be:4b:87:61:a9:d8:d3:ef:87:25:28:50:61:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C6:5F:C8:11:40:E2:32:E4:FF:22:B9:13:67:A4:A8:C6:3E:FF:C3
            X509v3 Authority Key Identifier:
                keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e4:64:15:6a:45:bb:48:ba:f2:67:5e:c1:9e:22:4e:9f:21:
         df:46:71:96:86:d4:fe:13:80:24:51:ef:92:90:8b:f2:e9:56:
         29:af:2c:63:7f:43:24:f6:3d:22:c4:fa:5d:fd:29:49:2d:a3:
         8b:8c:8d:f7:d5:c6:56:17:69:c1:26:e4:a7:a9:03:64:65:00:
         a4:4c:c7:62:2c:78:85:04:91:58:34:33:28:ea:97:04:6a:dd:
         e4:44:44:58:11:cc:d4:6a:e6:e8:e0:78:56:05:ba:f7:dd:30:
         b8:4c:26:bb:ee:2f:28:7b:83:75:d0:6c:de:93:f8:de:62:76:
         07:41:40:4c:46:8d:33:94:e0:eb:4c:74:9b:98:95:67:1a:f6:
         df:b8:db:cb:26:63:9b:40:e9:63:63:e1:93:f8:a4:1b:d4:4e:
         50:ca:6d:a7:4f:8b:7e:9b:92:07:ee:7e:68:57:a7:33:2e:0a:
         93:ea:55:ac:bf:93:68:61:9f:1d:be:8d:1a:47:e7:d3:90:c6:
         d7:ca:b4:fd:23:66:bb:25:71:0a:11:ee:71:60:a0:ec:6e:e6:
         cf:d1:78:dd:ad:5f:ba:11:db:84:de:dd:b9:a2:9a:c8:70:46:
         54:54:63:c0:af:1f:e9:5c:b1:2b:48:61:dc:76:e6:3c:ec:1d:
         c7:f1:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----