Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File:                     sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier:          gK+yjAMKRzyfiB3z870WYZAPbjjQN8pdHO3jKkO9PW8=
Subject key identifier:   45:95:08:A9:81:17:B6:F5:DB:44:5B:08:F1:FD:CB:BA:8C:BF:95:8E
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer:       /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial:       01962F3D6EA6A9D183473F877EDAEAA3FF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number:          0AEE
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
                          2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: 9ZwHoDrbdJ2VVjWLm7JXRXgGRKLnH/vkjeUNUmXLrYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:a6:a9:d1:83:47:3f:87:7e:da:ea:a3:ff:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=459508a98117b6f5db445b08f1fdcbba8cbf958e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:08:e9:6d:9e:de:39:02:2f:ad:51:88:11:
                    7e:d9:75:0a:6b:68:fb:27:9d:df:a6:08:5e:31:14:
                    14:4c:d6:ed:ef:a0:d3:c1:8b:02:33:ed:5b:5e:fd:
                    eb:a6:32:51:85:8b:a6:0a:f9:5f:e1:ef:65:54:e0:
                    a9:79:db:3a:e4:2a:cc:80:db:27:f1:63:c4:ad:0f:
                    8e:87:0f:33:83:98:4e:f0:a8:e8:5e:f7:8f:1d:e6:
                    dd:5e:3e:17:40:58:76:36:63:3e:a7:94:31:98:91:
                    53:4d:98:a2:2d:44:1e:c9:b3:4d:64:c5:8f:cb:8e:
                    bc:16:72:fd:08:84:df:21:61:d3:36:04:05:ef:75:
                    2b:ed:89:1e:30:b3:45:51:83:96:de:a5:d8:df:31:
                    29:9c:f0:27:1d:33:30:16:75:79:bb:94:2a:8a:fa:
                    87:25:a9:10:6c:27:91:d9:54:8f:65:5f:cd:28:bc:
                    b5:5e:76:e9:39:4e:d5:6f:8e:a9:86:c1:6e:3b:d1:
                    d9:06:11:31:82:cc:c0:96:71:dc:a1:49:31:68:ee:
                    a6:7f:38:96:66:7d:34:ef:fa:22:97:ee:85:b0:1c:
                    10:dd:9a:7d:be:5d:5c:59:f2:85:47:9f:13:aa:8d:
                    a0:b2:4d:e6:8d:da:13:38:5a:c8:64:df:5c:c5:eb:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:95:08:A9:81:17:B6:F5:DB:44:5B:08:F1:FD:CB:BA:8C:BF:95:8E
            X509v3 Authority Key Identifier:
                keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:4b:b1:16:ca:45:6b:8a:a5:44:ec:22:7c:a6:19:32:ec:
         22:8a:bd:16:e4:a1:15:c1:ea:77:88:a8:b2:c1:e5:a0:ea:20:
         a9:d6:2e:6c:2c:4d:96:3d:97:51:e1:b5:0a:ef:48:23:01:e8:
         22:30:91:7d:e8:65:c4:22:9b:3a:cf:5b:12:a0:fa:63:c5:c4:
         2e:6d:7d:88:ad:9d:b7:a0:e7:60:20:b3:28:b7:1c:36:fd:73:
         a4:7a:3f:54:09:1f:a0:cc:3d:51:9e:6c:02:e8:a5:06:71:63:
         34:03:ae:53:7f:a2:7e:00:67:ce:61:53:86:1b:6c:15:73:d9:
         0b:0c:7f:9f:67:6f:ba:4d:ec:38:9b:43:a6:60:0b:64:8a:b8:
         78:b0:e9:f8:9c:22:a1:23:65:7a:09:f9:39:05:47:04:46:a2:
         57:8b:e9:53:c4:b2:31:a2:9f:88:b6:48:83:58:b5:e5:48:d9:
         88:c0:7d:07:ce:ad:7b:ac:25:5e:8d:d7:59:f0:75:ca:cb:cb:
         6a:bd:c9:08:3f:b3:21:85:7b:62:28:7e:3a:c6:34:7f:56:b8:
         61:bc:af:d9:50:d6:6a:68:2c:68:1a:9b:b9:13:22:8d:7a:41:
         cc:a1:70:71:bb:47:6b:b4:9c:10:6a:cc:5e:19:ca:64:c9:1e:
         3a:a7:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----