Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File:                     Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier:          bYHRT2mlg2XMC7duzBcAodA9M1dmk6QdWMb0Xh2T0o4=
Subject key identifier:   D8:0E:DE:48:11:07:9C:14:40:0E:08:A8:4D:8D:16:47:F4:86:10:E9
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer:       /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial:       01962F068517A6767976B2637EBFF0D6B5B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number:          1480
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: dDEy1MojtshjNQKquJJcb6iPdCZwtlzmpSKaebEQYF8=)
                          2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
                          3: fEAZa-O9fHJhM2xOUClofNSLhKo.roa (hash: 7vCADDbVNbLzIuWoH8sPbznEC+p/MBTPDQ5yLj9acsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:17:a6:76:79:76:b2:63:7e:bf:f0:d6:b5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=d80ede4811079c14400e08a84d8d1647f48610e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:99:5e:7f:0e:38:91:5a:c6:0a:f4:5d:36:d2:
                    f2:c8:55:02:e2:2b:78:10:95:81:5b:e4:47:12:f9:
                    af:bd:af:bb:c6:a8:59:f5:94:d7:54:16:43:c6:de:
                    a7:6a:cc:57:b5:e4:75:92:b0:f7:5d:49:de:3f:04:
                    f6:97:d4:4f:0c:38:63:ae:77:7d:66:4e:46:15:4f:
                    f5:fe:76:de:8d:ec:2f:4a:68:0f:97:ea:c5:05:d9:
                    c9:63:3f:f0:9e:1e:62:ba:9b:c0:5c:19:83:93:a6:
                    41:6e:39:33:c2:66:1b:86:b1:3c:b3:20:92:41:09:
                    12:ff:00:3d:d9:7d:e5:51:c8:93:3a:af:f4:44:04:
                    74:09:3d:7c:ef:70:d7:a6:16:07:65:94:ba:81:b0:
                    7e:6b:98:a2:41:85:3f:8a:1c:86:1d:5f:f1:73:aa:
                    1c:70:b2:da:ea:4d:ea:05:71:3a:81:d6:26:1c:14:
                    39:5e:ed:58:b2:39:c8:be:93:68:7a:ff:ac:7c:6d:
                    b0:ee:fb:1c:3e:c3:2d:f2:9f:b2:e7:00:35:6d:df:
                    da:51:ac:0b:25:49:2e:67:c2:16:01:a2:f5:5b:fb:
                    c8:b0:e6:3a:e0:32:30:8d:f2:8f:7e:79:c1:45:44:
                    88:bc:76:a4:17:78:58:ff:31:99:2b:7d:cd:dc:96:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:DE:48:11:07:9C:14:40:0E:08:A8:4D:8D:16:47:F4:86:10:E9
            X509v3 Authority Key Identifier:
                keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2c:3f:94:5d:43:24:f8:68:52:24:db:7a:0f:3f:43:a2:1a:
         f0:ac:50:3c:c3:ce:c2:4f:fc:f2:d7:1f:a1:dd:b1:97:b9:b9:
         d3:87:70:df:48:cd:ca:c9:9a:99:84:c5:2a:49:e7:83:a7:36:
         e0:85:93:7b:e2:8e:f4:04:b7:57:1d:98:c6:0d:dd:d8:1f:a7:
         2f:13:de:20:01:00:bf:4e:eb:9c:27:21:a4:9d:86:d3:15:2b:
         44:b4:97:f6:5b:8d:93:c1:89:30:ef:43:81:ca:94:04:a8:93:
         e0:46:86:c0:b1:0c:28:13:c3:5b:df:35:dd:c8:f0:ba:d5:0c:
         84:ab:95:eb:f4:58:d7:d1:1b:21:6a:25:e2:e0:8f:02:03:62:
         56:88:46:ae:a0:41:58:f4:8e:cf:db:5c:b9:ce:44:17:82:58:
         b0:5b:73:3e:94:44:e8:fc:8c:b5:a4:8a:32:c3:b5:9c:77:b5:
         0e:2d:98:e3:62:b1:c3:49:7b:30:b4:63:1f:a1:86:b6:0a:0a:
         fe:21:41:1f:4d:b2:2a:03:19:38:bf:b0:d8:a5:25:de:5e:cc:
         a0:89:ac:c9:c3:5e:56:a6:da:69:38:ce:97:83:a2:50:cf:25:
         c8:68:61:b3:91:9d:bb:63:4a:d8:15:89:ae:c3:61:d0:8a:75:
         57:cf:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----