Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File:                     Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier:          8QDg/b+dqS9A9cFmNq6mdNeDUcJsPRqhCB6OvGuNSAo=
Subject key identifier:   0F:E5:F8:24:08:F5:37:88:24:60:FD:93:EA:20:11:D8:FE:64:20:5A
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer:       /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial:       01962DF4020797738BE148F22CB47E6A9A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
                          2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: b5jl5j2GtAFWJYj/Yf9+4j2uJhYxdWGtVsRHesRnCho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:02:07:97:73:8b:e1:48:f2:2c:b4:7e:6a:9a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=0fe5f82408f537882460fd93ea2011d8fe64205a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:39:2d:33:bf:27:1e:f7:08:c4:1e:13:45:
                    64:4b:30:46:fe:fe:b9:ed:fe:33:02:ed:29:5e:9a:
                    45:a7:92:db:cb:20:5d:ff:fa:64:3e:41:86:bd:62:
                    6d:c4:db:1b:66:c5:b4:82:54:44:2e:ce:b2:6c:8a:
                    f9:74:f4:da:f9:8b:7e:4f:eb:57:c9:71:38:3e:bc:
                    08:ac:ec:49:ea:33:ed:28:03:b2:44:a3:8a:c8:7b:
                    0a:b5:6d:ee:01:b3:0a:9d:12:10:1c:a7:d4:e1:66:
                    17:a5:ea:ff:1b:6e:34:47:2e:ce:4e:50:d4:df:be:
                    0c:36:bb:7d:88:89:6d:42:fa:87:25:23:57:54:b7:
                    21:5a:97:3f:96:a0:f2:b7:b7:d3:87:cf:d6:bd:76:
                    99:c2:29:79:9e:de:bb:04:c5:62:dc:d8:bf:91:a3:
                    dd:66:8f:6b:ed:e5:f5:84:f5:08:83:67:bc:0b:74:
                    0a:9f:84:75:18:e1:6e:c8:94:95:06:f7:75:ad:49:
                    0c:ea:1d:cf:d9:36:44:52:23:6a:11:4c:12:b6:9e:
                    5a:b5:0c:2a:7d:48:d9:09:7d:2f:bb:7e:92:47:21:
                    71:9a:10:3d:9f:2c:ef:99:67:96:24:6e:ba:5e:65:
                    32:3b:91:c4:24:0b:83:5d:b5:11:92:dc:ac:9c:91:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:F8:24:08:F5:37:88:24:60:FD:93:EA:20:11:D8:FE:64:20:5A
            X509v3 Authority Key Identifier:
                keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:7d:5a:17:45:b4:1c:1c:72:66:20:04:0e:0b:2b:72:84:94:
         c0:f3:4d:10:33:18:48:b2:07:98:3d:c5:18:1a:db:bf:57:f7:
         6e:00:5a:0f:9d:4d:a9:8b:ea:b1:50:66:76:08:aa:2f:50:db:
         fb:21:39:d5:97:e8:fe:66:20:cf:40:79:c9:58:f2:5a:56:c8:
         be:06:b6:00:48:02:0b:85:a6:0e:4e:c6:ab:23:8a:bf:fe:a6:
         b6:12:b0:9a:0a:14:e2:6e:59:17:43:b7:31:3c:08:1b:7f:56:
         db:65:1d:3b:05:a7:9d:11:1e:cd:6c:c8:66:e3:8b:d0:42:d4:
         64:e8:c5:de:c7:0d:1b:bd:5c:a7:f8:a0:c8:18:d5:2a:d5:23:
         e2:f8:96:59:58:16:83:77:20:f3:37:cf:a1:84:47:59:d9:15:
         16:6c:13:c0:d3:e5:5f:9d:d3:41:c3:01:ca:fb:80:4e:ab:79:
         87:83:48:b7:7f:87:8c:59:1c:87:c5:4d:bd:3a:35:40:42:27:
         0f:0c:2e:24:9c:67:5e:e0:3a:16:f6:bc:65:13:0b:e1:a1:e1:
         24:0f:57:be:cc:e4:3d:25:f4:47:51:22:ef:41:9e:39:a7:81:
         db:ae:11:aa:5e:61:b2:1f:c3:fe:60:e7:f9:e0:ec:ef:83:77:
         d4:ba:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----