Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File:                     rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier:          XSnadwgg5+pix82kgXp1uqNO+EX40ixewkTGPfPw5to=
Subject key identifier:   00:D5:C0:07:4D:92:3A:0C:E5:62:1E:6B:35:49:FC:AC:A0:BC:3F:18
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer:       /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial:       01962E987013F2C9518CBFAABAD08062ACC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number:          0FD3
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: IY6w9j5EistNVUGuWpMcorQCILnJn30pL0YQ9qyv7x0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:13:f2:c9:51:8c:bf:aa:ba:d0:80:62:ac:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=00d5c0074d923a0ce5621e6b3549fcaca0bc3f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:f4:6d:bd:cc:13:fa:91:4f:2c:df:11:e0:
                    9f:b5:71:13:fa:d7:dc:d7:6e:25:a1:12:a9:48:65:
                    8e:38:3f:59:8a:76:d8:a2:be:57:a2:80:5d:8f:1a:
                    50:04:f8:1c:34:bd:f9:ae:f3:9f:45:5a:94:75:15:
                    c5:3d:c5:53:ac:69:76:0f:91:14:f6:29:5f:86:4e:
                    c5:cd:5d:a4:c7:46:bb:85:f4:71:56:18:b4:81:d2:
                    01:45:96:52:b2:45:8c:16:2c:14:96:34:fa:63:c3:
                    f5:7f:3b:13:ee:76:32:3d:94:da:b8:70:b1:dd:fb:
                    b1:3e:a4:10:6f:a6:30:40:9f:06:65:09:12:38:dd:
                    ff:8e:96:70:f4:db:7a:78:69:30:71:bc:a8:4d:19:
                    07:b1:6b:a0:d4:68:fb:39:4a:57:e5:d3:3e:e5:97:
                    d2:10:b1:23:c9:84:35:4d:60:2f:a6:d7:1f:68:0e:
                    81:33:ff:d9:4d:5b:b3:28:58:af:77:12:f5:3b:b3:
                    62:f1:31:93:42:cf:6f:e8:15:89:c9:66:9b:0f:36:
                    cd:94:5c:18:cb:4c:5a:86:d7:98:1b:f9:ed:ac:ab:
                    7e:eb:ec:cd:38:68:c8:78:b0:5e:7e:95:aa:78:c5:
                    a5:d7:9c:79:e4:f1:65:c6:8f:db:20:05:16:ad:0e:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D5:C0:07:4D:92:3A:0C:E5:62:1E:6B:35:49:FC:AC:A0:BC:3F:18
            X509v3 Authority Key Identifier:
                keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b7:8a:2f:22:9a:01:ae:dd:5d:41:75:19:c4:fc:e0:6b:d7:
         22:4f:5c:6a:8d:63:98:b2:c1:dc:d7:40:03:18:d9:c4:0f:7e:
         5c:76:51:ec:69:98:8b:a3:38:d4:87:35:aa:50:9d:73:67:cc:
         34:2b:6d:64:56:28:4d:81:13:f2:c8:3d:89:6d:ef:61:b8:18:
         77:9d:dd:68:df:3d:61:5a:f5:93:66:ec:13:22:54:18:38:81:
         81:e2:0d:cb:d7:37:a2:21:c9:6d:45:56:dd:7f:24:3d:e4:ea:
         b3:8e:01:9b:88:7a:c9:33:a1:fe:90:9b:47:88:da:ef:c2:12:
         8e:bd:07:df:99:18:cf:f1:f2:1e:c5:de:ad:b1:7e:dd:de:62:
         38:00:01:f1:d8:47:e7:ae:b9:8a:3a:fa:93:1b:a4:d8:04:c0:
         cc:f0:75:ec:da:0b:7c:46:5d:92:cc:76:3c:8f:4a:7d:95:c8:
         a7:f2:ac:e4:f6:e1:88:ab:1c:6b:a4:df:df:dd:bf:25:07:02:
         72:e2:53:8b:16:28:5a:68:8c:fe:f8:ee:01:46:bc:96:a3:ac:
         36:53:a2:c8:7d:a0:18:c2:f9:36:34:9d:5a:02:cd:95:da:29:
         89:7d:df:9a:40:69:f4:ef:e0:f4:e7:a1:76:49:85:86:19:60:
         dd:ac:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----