Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File:                     DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier:          JNwuko0Bpe6DS/y85H1bECR0ACRrHOZ4PE8iHPW6Uuo=
Subject key identifier:   74:7F:DA:BA:51:6E:7C:D4:36:8E:71:8E:B1:16:AC:E9:D0:04:37:7E
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer:       /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial:       01962F749D87A29228FC2CF73FA8E773091A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number:          142E
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: BdsyB+Tzkb1FFZST10gXd/LDJDay0V9xZs/WtKefa4M=)
                          2: X0NMFv3xuHRSXYMGKUXV8IKykec.roa (hash: OjOw3rcSA/T5JCD0NPBFtVQyCjbWRUE+EyaG3m+jzio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9d:87:a2:92:28:fc:2c:f7:3f:a8:e7:73:09:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=747fdaba516e7cd4368e718eb116ace9d004377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:6e:b7:ac:e7:a4:f5:e6:75:43:39:32:66:
                    fa:b9:59:a7:e9:a5:a1:04:95:48:78:77:4d:bf:77:
                    7a:0b:51:8b:0d:e8:4a:27:8d:2a:b2:46:11:6f:77:
                    c4:4f:ab:23:35:d4:82:50:ce:ed:bc:13:d3:79:b7:
                    30:3b:27:45:c9:88:39:d1:7e:e0:b7:f9:89:fd:ad:
                    c8:16:e3:0f:03:3f:1b:21:50:38:cd:e4:04:3d:76:
                    d7:7c:ec:47:de:c9:1b:f7:d7:c7:e9:6a:ea:0f:d3:
                    85:5d:8f:d4:cc:e4:90:26:60:e2:77:3b:25:da:fc:
                    ec:ee:d6:a1:ae:cc:25:c7:96:7e:d3:d0:06:8f:ee:
                    50:d3:21:f9:c8:80:51:0c:2f:90:1c:82:12:e7:48:
                    2d:fe:f0:aa:3a:ed:aa:49:a0:f1:3b:33:ec:9b:ad:
                    82:0b:56:5b:0d:ca:bf:07:06:f3:17:6c:07:bd:e5:
                    22:ac:07:a5:a5:ea:cf:d3:a8:e8:a6:9d:51:6c:cb:
                    e7:54:d4:ff:56:11:04:77:4d:5e:1e:f4:68:9e:c2:
                    35:51:a6:cb:41:f9:53:03:cb:44:47:50:b7:93:de:
                    d4:97:87:24:fb:9e:43:55:58:42:16:f7:96:65:c2:
                    db:5f:7e:7f:21:6a:4c:c5:ec:ff:7b:e4:d9:61:55:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7F:DA:BA:51:6E:7C:D4:36:8E:71:8E:B1:16:AC:E9:D0:04:37:7E
            X509v3 Authority Key Identifier:
                keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:c5:47:be:88:28:a8:cc:9b:c2:b2:c6:3c:a5:82:01:e7:
         1b:63:e7:ff:45:bd:10:8b:ff:d9:aa:13:5b:53:72:b3:84:ec:
         62:c2:34:13:4b:50:87:64:94:78:04:32:29:a9:8b:82:19:02:
         43:96:d0:2d:5d:dc:fd:f0:1d:eb:7b:e5:b4:01:ca:a6:8a:48:
         a7:9c:ad:4a:98:57:23:18:a3:3d:9a:b3:4c:0d:88:10:b8:4f:
         b0:4d:5b:fb:c9:dd:93:98:a3:5a:56:fd:ba:8b:c0:c3:48:0b:
         37:29:08:c5:e2:db:ce:ba:d4:99:8c:3b:22:84:f9:2e:49:9b:
         b4:0a:ae:74:28:a6:c9:87:0e:0c:d7:e3:16:33:0e:f1:b6:2a:
         1b:42:e0:b1:a9:eb:e7:7a:46:43:8f:43:f4:7e:1e:d9:56:5d:
         f7:d7:4f:af:74:d0:db:15:c7:dd:ce:dd:5a:61:fb:46:30:e8:
         77:d3:cb:27:d4:27:47:fb:4a:6f:eb:9a:cb:99:0d:33:e8:65:
         42:af:72:9c:e6:41:19:d4:5f:ea:80:1b:a4:aa:31:a4:53:34:
         4c:6b:a3:49:55:d9:58:65:3a:42:aa:b8:7c:96:fd:b9:9f:0a:
         ec:bc:9b:45:56:c6:4a:ab:f3:19:9e:38:ce:b5:e8:e0:2b:6b:
         8f:73:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----