Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File:                     0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier:          HDq6+QJs1hD3JaRVYhym4xRFlYzd4iOV2EkTSfUqm1E=
Subject key identifier:   AD:90:D9:61:C4:E3:CE:85:6F:35:2C:48:CF:77:4E:73:11:85:6D:29
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer:       /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial:       01962DF44D401D43835528687706FA5E5919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: VAgAl0JBZ7o5IQKUfJus5ZzvJPC6U5GdpH8AydLAklc=)
                          2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4d:40:1d:43:83:55:28:68:77:06:fa:5e:59:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=ad90d961c4e3ce856f352c48cf774e7311856d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:82:4f:e2:36:9e:f8:e2:7d:1f:6f:d4:4f:
                    08:24:0c:62:fb:3e:1e:d3:72:51:a5:64:c0:c8:95:
                    4d:3f:1c:f4:db:ef:64:57:8e:d8:25:cb:ca:5b:e2:
                    02:1a:e3:03:2b:69:16:84:a7:3b:47:d9:f3:9b:6f:
                    6d:f0:51:69:85:e1:54:9c:9a:54:e0:cf:5d:cf:8b:
                    40:d6:17:77:44:25:14:77:9c:bd:87:c7:4a:54:4b:
                    61:8e:60:d0:8b:e9:48:2f:fe:67:1e:d0:65:62:9b:
                    34:99:cb:37:90:eb:9b:c0:4c:59:a4:e9:56:26:89:
                    6f:9e:f8:11:3d:c2:ab:4d:a7:d6:6f:dd:8d:c5:a7:
                    5f:5c:d0:47:46:18:6d:1e:5d:42:99:1a:1b:49:91:
                    ab:b0:19:1c:b7:f1:ff:4d:b2:b4:f9:43:ec:e9:97:
                    21:89:ea:8b:66:0f:55:2e:f1:e5:41:d0:66:7e:10:
                    5a:fa:a3:5e:9f:65:69:15:52:f0:2b:4a:b4:93:44:
                    84:db:c8:b8:3a:df:70:5b:d3:1c:cd:e3:7e:ba:4e:
                    e4:13:c8:91:64:ac:35:75:e7:7f:26:85:7e:7c:72:
                    09:99:f6:67:d6:03:c8:57:c1:6f:7c:58:1e:3d:88:
                    9d:e2:8c:31:2f:bd:64:7b:d0:f1:e9:d9:ec:48:8f:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:90:D9:61:C4:E3:CE:85:6F:35:2C:48:CF:77:4E:73:11:85:6D:29
            X509v3 Authority Key Identifier:
                keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:14:8f:f3:0c:00:3a:15:66:fa:dc:29:b1:7f:33:a8:2e:40:
         38:d9:da:a8:d5:6b:45:e1:bc:2f:ad:ad:a6:0a:bb:ae:4f:4d:
         54:d2:d1:db:0c:0b:57:ca:e0:5b:09:79:0d:2c:4c:88:1d:24:
         04:fd:a6:8f:7c:60:79:db:c4:8e:49:fc:9d:2a:d3:79:6f:36:
         0b:61:c5:73:c9:11:a8:ba:53:3f:48:77:bb:d8:ed:ce:9b:5c:
         11:c3:0e:8c:14:9e:1d:39:f4:ea:93:e2:70:96:db:b4:7c:cb:
         fd:0d:be:34:e2:02:e7:a8:e3:3b:a5:27:3d:7c:12:ea:7e:8b:
         28:04:23:87:7a:f4:3a:09:b5:d9:81:b0:15:92:17:dd:93:2c:
         be:3d:1f:b3:04:37:be:ea:3f:94:43:d3:01:3c:65:33:58:a1:
         7c:70:8b:bc:22:59:1d:fc:f7:a7:58:87:9a:bd:f4:75:52:1b:
         3e:78:db:d4:5c:de:64:d5:57:98:7d:f2:0d:04:e3:19:ac:87:
         02:f1:75:00:80:be:3d:5d:94:d2:f8:23:32:38:3b:1c:6a:09:
         70:f3:e6:ea:7e:67:90:0f:6c:94:23:f3:f4:3c:e0:0b:bf:b9:
         a8:33:18:0a:4c:18:6b:84:00:b0:c7:1b:98:3d:5e:a5:1f:34:
         00:6a:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----