Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File:                     DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier:          9SesYsvDUL5wQodxHbbqEaTx5ok6zDD+ndIq5jtmfx8=
Subject key identifier:   CB:00:EE:0E:7E:25:9E:AC:51:63:55:10:04:51:45:7A:4B:2E:17:DF
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer:       /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial:       01962DF3AAE5FF7CF4A9B2F6CF814F4F3A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: cfNaf1YMokCLr+DakXewUXzRW+ut72l1Xf+iR41CtL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:aa:e5:ff:7c:f4:a9:b2:f6:cf:81:4f:4f:3a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=cb00ee0e7e259eac516355100451457a4b2e17df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a6:d4:e0:2d:e8:2e:48:10:ab:3f:db:db:10:
                    71:29:dd:1e:de:82:14:5b:ba:4a:f0:9a:23:3c:1f:
                    73:14:66:45:0e:5f:69:df:47:5a:a6:1f:03:cb:30:
                    a6:8c:49:9c:6b:89:8b:7e:7a:26:90:2c:ee:25:96:
                    3e:cf:f5:9b:1d:11:06:b9:f7:72:5e:17:5e:52:e8:
                    61:b9:3f:aa:53:fd:be:1b:09:d8:1a:5c:8e:5c:b0:
                    bb:28:9f:a7:c0:21:5e:6d:d1:3e:81:0b:e3:59:50:
                    f6:b1:e0:b0:1f:54:d2:b0:af:1a:9f:d4:90:bd:68:
                    96:af:36:b4:b6:ca:80:b5:9e:23:cf:13:2c:6c:c9:
                    f5:aa:7a:fe:f5:63:cb:32:70:08:82:6f:50:59:cf:
                    33:64:16:fc:97:ec:a1:ea:24:62:1a:5e:56:5c:4a:
                    f8:a4:42:66:a9:b2:c7:ac:17:83:f2:7f:db:4a:65:
                    fe:4c:fb:0d:0c:f1:a1:05:31:60:80:35:6d:b9:15:
                    bb:d5:5b:27:b4:77:71:c4:45:67:17:28:aa:0c:d9:
                    d4:dc:43:8b:7d:eb:59:23:eb:91:53:da:35:df:d0:
                    eb:bb:10:bd:77:b3:92:9e:36:6a:42:2f:11:19:0e:
                    fb:5f:03:b4:f8:f1:4c:04:0c:d6:8e:35:19:04:a6:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:EE:0E:7E:25:9E:AC:51:63:55:10:04:51:45:7A:4B:2E:17:DF
            X509v3 Authority Key Identifier:
                keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d7:e5:52:fb:a0:e6:be:52:41:60:04:1a:ba:1d:1e:a9:2f:
         b7:25:d2:f1:06:65:02:78:99:a7:42:e0:8d:ef:8e:66:62:9d:
         20:21:b8:4a:9d:db:75:39:41:41:3c:e9:9e:92:21:3b:b4:57:
         f1:2c:53:22:15:ab:01:2b:7e:60:f1:8a:34:b2:85:52:2b:af:
         8c:bc:e4:ae:26:ca:cd:97:c7:4b:02:79:de:7a:2e:ad:c4:7a:
         ec:81:8a:0a:91:f7:84:da:a4:dc:66:60:e7:20:40:a7:8f:9f:
         90:c4:f5:62:b3:1c:e6:7b:fc:06:e2:f4:30:b9:79:a6:89:87:
         0f:17:ea:01:7e:9d:77:e2:18:a7:fb:95:7c:1b:90:9c:9f:8e:
         f8:37:c8:f1:f2:d7:34:ca:0a:0c:fa:24:b6:f6:71:e3:3b:bc:
         e4:ef:a7:84:3c:80:3c:17:35:fc:c6:4d:fb:f4:a1:c8:12:0d:
         42:df:99:62:a9:b3:5e:9a:66:15:48:bd:11:f0:da:75:48:b4:
         f7:b2:6f:8c:6c:f7:22:b9:3a:46:b5:68:7e:14:e9:f1:f1:bc:
         f5:3b:31:50:ce:ac:23:ca:43:20:33:47:70:38:e9:6c:12:d1:
         68:bd:0e:04:a7:e8:63:88:1b:38:a0:41:72:eb:60:67:08:24:
         97:d9:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----