Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
File:                     DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft (raw, json)
Hash identifier:          Pq8vUC1VR8RhD67gkdeh7PwaR8/n/AuUuCBC070IrUU=
Subject key identifier:   2D:3E:CE:A7:7C:BA:35:2A:AF:4A:BB:76:55:DB:3B:A6:C7:31:5D:34
Authority key identifier: 0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
Certificate issuer:       /CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Certificate serial:       01962DF3DC7C180C161E8EE435BD5F41FE5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
Manifest number:          06CB
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl (hash: FrWM8QAc4LM5uC3sGx7vunYZA+bwfI817kRfmQ54HK8=)
                          2: tn341Lzi5MPGO9EUcmk0M7cXZxM.roa (hash: FFlSPwmOxmVm+VW9zVZtaZMl/pgjePvamNa1bTrjlRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dc:7c:18:0c:16:1e:8e:e4:35:bd:5f:41:fe:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=2d3ecea77cba352aaf4abb7655db3ba6c7315d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:a4:72:19:a5:3b:52:64:b7:d7:53:d5:ad:
                    03:fe:45:cd:49:52:d6:9e:df:e9:ce:cf:d4:86:9c:
                    8d:5e:fd:23:79:c7:ed:b9:47:c2:0d:5b:33:1a:d3:
                    cd:36:42:e5:50:ee:ba:43:02:2e:36:89:6d:b4:b8:
                    b6:03:23:6b:ab:ba:10:43:54:5d:86:9d:7b:08:2a:
                    c2:56:ee:ec:29:41:9c:23:e9:15:64:29:d2:fc:b5:
                    49:1f:fa:eb:7e:1d:60:66:58:e7:5e:38:d9:87:4f:
                    5a:62:2a:ff:6c:df:b1:db:4f:18:35:b7:7f:33:14:
                    a6:d8:62:25:24:76:d8:aa:ad:d9:0c:b2:5c:94:2b:
                    a3:cf:76:87:45:f4:c5:eb:a7:f1:1a:0d:3c:22:d7:
                    5a:f4:e9:7d:4d:57:a1:7e:88:3e:dd:53:d7:4a:e1:
                    b4:3a:00:f5:b3:8b:37:e4:b2:8b:5f:fd:e8:86:a0:
                    9e:40:17:37:f7:d9:01:6b:ee:9b:b7:9f:b3:8a:4d:
                    2c:a2:e1:fd:cd:81:b3:8c:9b:b8:33:e4:62:32:06:
                    bf:29:db:cd:f3:a4:e8:18:2b:c4:44:19:f6:c3:93:
                    6e:41:4b:97:23:3d:22:a5:7e:f8:65:72:8f:1d:a9:
                    f0:9b:af:72:1d:43:92:db:4d:15:71:eb:b8:11:30:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3E:CE:A7:7C:BA:35:2A:AF:4A:BB:76:55:DB:3B:A6:C7:31:5D:34
            X509v3 Authority Key Identifier:
                keyid:0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:06:9c:04:3f:00:e8:50:34:2f:1b:b2:52:c5:0d:80:f8:55:
         1f:bb:05:7c:4d:2f:ba:bb:ca:94:d4:90:27:91:67:ef:54:d4:
         a7:e8:7b:16:37:9d:01:6f:ad:d6:e9:3a:95:48:f4:7d:09:1d:
         ff:71:24:ca:ec:e9:9b:e6:e7:85:97:a0:66:57:76:15:45:29:
         81:81:4e:b3:eb:64:8f:97:51:f2:b0:c0:f1:1b:0d:ba:2c:46:
         c6:0f:9b:2e:7c:cc:9d:97:78:5f:a7:80:72:eb:67:bc:9e:31:
         54:32:49:0e:8a:ec:11:8d:8f:e4:19:60:9c:1f:a0:72:2e:a8:
         e9:da:d9:9e:4d:76:da:58:f7:db:25:cb:b9:3e:90:ac:8f:fc:
         64:47:cf:ce:c5:e4:cc:88:04:d6:fe:dd:2e:e4:1f:7e:3a:49:
         f1:54:07:a7:b0:0f:09:e5:dc:29:93:3a:42:8a:1a:c5:05:7c:
         6a:a0:85:da:ad:d9:b5:82:75:3c:00:2d:b9:a1:bb:11:53:c8:
         bf:d1:ba:06:bb:dd:51:4f:11:e9:56:67:ab:5e:cf:00:09:85:
         1e:a7:d8:27:fa:5f:1c:92:45:17:40:80:6e:19:f7:c8:73:79:
         12:4a:83:0c:0e:70:21:e3:5c:5a:ef:e9:c4:fc:a8:e2:97:90:
         a6:28:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----