Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File:                     Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier:          BVceNgqrCA08OpdZm+M0JnZAvWIVYEK0V6t68NCCS8o=
Subject key identifier:   DD:A2:78:93:C9:08:F1:96:EC:88:A6:33:3F:EA:24:19:D8:29:E5:B1
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer:       /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial:       01962ECFC1E6CA16ECD0231C797CDAFD254B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number:          0754
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=)
                          2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: uQWLrQdtm9quFtCyoUwVuD+GOoPDAvDwPVESOhMBer8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c1:e6:ca:16:ec:d0:23:1c:79:7c:da:fd:25:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=dda27893c908f196ec88a6333fea2419d829e5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:79:3c:71:f1:05:95:1d:86:69:70:74:5a:
                    f2:ce:f0:9b:53:cf:e1:26:20:a5:c2:f1:e2:5e:c4:
                    b6:d7:25:dc:96:f8:fd:57:06:03:ec:c7:02:1f:88:
                    35:a7:ca:bd:1f:f1:85:b5:6b:d6:29:9d:4d:4d:fe:
                    4e:ca:84:e2:7b:8e:79:9d:1e:29:e8:ca:59:70:e2:
                    d4:92:ff:85:44:07:80:8b:3f:ad:79:58:ed:77:65:
                    86:4d:ab:16:c2:42:80:11:70:de:7f:e5:29:41:7c:
                    f3:ea:4a:11:8a:29:04:bd:9a:71:a1:94:c6:85:5e:
                    43:44:7c:33:77:1d:47:8c:23:e9:8c:84:1f:5b:6e:
                    ed:ab:16:53:2b:9a:c9:7b:c0:57:91:4b:a5:fd:bc:
                    5e:87:ba:1f:cd:01:3f:e4:91:53:2f:1e:a3:d6:6c:
                    7b:22:9f:0e:67:aa:b0:e2:7a:3b:7a:86:d7:2c:d0:
                    ec:27:e6:9c:06:e6:e1:c5:70:86:df:6b:81:7b:0d:
                    5a:f5:9f:c4:f4:27:71:eb:80:3e:f3:59:68:33:a1:
                    f7:b3:19:f5:aa:72:ad:39:85:50:c0:c8:51:37:89:
                    f2:58:1e:1f:a0:3b:09:ef:d8:7e:ad:05:77:da:c2:
                    8c:ae:35:a1:29:c8:fa:a9:ab:d2:3c:2f:4f:3c:43:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:78:93:C9:08:F1:96:EC:88:A6:33:3F:EA:24:19:D8:29:E5:B1
            X509v3 Authority Key Identifier:
                keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:4e:25:aa:68:96:cd:06:dd:70:89:44:a1:cb:f2:2c:ea:
         46:62:a7:ea:90:21:ab:91:d2:29:b3:16:b4:d5:d6:b3:ce:5d:
         94:36:40:4d:ee:88:a1:68:ca:b2:61:37:8f:79:7f:a6:45:35:
         86:4d:09:af:e5:75:d8:4a:5f:2d:f5:bd:fc:cd:6a:55:bd:51:
         64:0f:7f:2e:47:56:ad:8f:a3:09:b6:3a:71:42:4c:48:00:af:
         c2:88:f3:f6:20:67:2c:48:93:df:23:e7:b6:86:16:66:ea:c4:
         51:e9:66:e2:62:89:7b:20:ee:71:dc:57:ea:07:7c:95:b4:47:
         02:10:c5:8c:f6:34:96:68:9d:6e:72:14:ab:45:62:bc:18:99:
         c5:c4:fa:1b:0f:c5:74:f0:9d:41:33:cf:10:1e:c8:f2:f8:f1:
         45:2d:97:5a:51:58:4a:bc:b1:77:f8:e0:48:92:a0:01:08:30:
         e2:89:8e:c9:cd:24:93:b3:46:6a:4d:94:03:d3:3f:59:27:20:
         02:8d:a0:44:d6:fd:f1:6a:56:54:2d:2a:37:7e:81:0c:3f:b7:
         ec:bd:39:17:55:3e:af:a1:a6:0b:d2:34:aa:ba:f7:03:be:c8:
         14:a2:cb:b7:be:8b:15:c2:b1:12:79:b5:86:5f:97:5c:b7:00:
         e8:1f:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----