Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
File:                     tDlfbOqaAYpMyEgY5qo1INMiIYs.mft (raw, json)
Hash identifier:          1wAlkWB4057/0jajFjvGdfCkd08HeqaFqfoI4UDQlOU=
Subject key identifier:   1C:1B:A7:3E:D1:F6:23:BD:FF:30:AF:79:5C:F3:2F:1B:F2:CA:59:F5
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Certificate issuer:       /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial:       01962E98B81DFBAA22302DDE0C20B80F89F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
Manifest number:          0B6C
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: UoFhfe1D4fv5504pD16hAMtOHqM.roa (hash: f5OjLqYpJfmM6P+Sc+etueFJmxpiBV6zei8gZZWeXpE=)
                          2: tDlfbOqaAYpMyEgY5qo1INMiIYs.crl (hash: 4HY2Kg4HIWdn1JEJweu8c459CkQEcJ/Yf7AjKKcrzc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:1d:fb:aa:22:30:2d:de:0c:20:b8:0f:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=1c1ba73ed1f623bdff30af795cf32f1bf2ca59f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:5f:27:80:29:72:9b:98:10:97:94:5d:94:
                    3f:69:05:21:2d:19:16:37:ab:b5:01:cd:cc:a5:07:
                    ef:eb:3e:c2:a8:49:82:64:67:c2:00:41:ce:6d:77:
                    46:55:fb:65:9a:d9:76:69:7b:4b:b9:a1:53:10:15:
                    6e:72:1c:71:9d:74:1d:b9:89:45:ee:7d:25:35:73:
                    5b:d9:0b:e3:9f:21:2f:68:8b:92:f3:9c:36:4a:8a:
                    76:bf:79:26:39:c8:e1:ee:0a:2a:7f:2c:3b:2c:6b:
                    62:be:83:4c:42:bd:bc:52:d9:39:16:3f:b3:50:0a:
                    b1:96:1a:64:62:4d:f7:da:ad:e9:71:9f:9e:55:d4:
                    2e:ac:d7:8b:31:83:09:5b:28:9d:09:76:95:d8:35:
                    c0:41:a1:77:21:e9:88:d2:c8:e7:d3:44:ec:fe:a1:
                    68:59:15:0e:2f:57:1d:bc:9c:49:17:3a:8a:f6:db:
                    24:9b:54:60:be:c3:7e:74:25:20:b2:15:6b:33:4e:
                    9f:3b:06:07:53:f2:7e:d3:d5:34:38:6e:b9:33:0d:
                    bd:70:b5:4d:27:7d:79:6a:ce:41:4c:77:00:63:2f:
                    b8:10:60:22:3f:b8:b5:42:48:6e:d6:90:83:1c:da:
                    92:67:77:c6:68:16:9f:d3:7e:7c:fb:dc:3d:4d:d8:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1B:A7:3E:D1:F6:23:BD:FF:30:AF:79:5C:F3:2F:1B:F2:CA:59:F5
            X509v3 Authority Key Identifier:
                keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:a3:06:98:eb:76:47:cf:50:1f:b4:f7:bb:b3:7d:99:b2:
         32:f7:1e:90:c3:92:5e:29:93:79:88:05:c4:28:d7:32:3f:0d:
         6f:5a:30:95:91:db:96:70:d5:99:92:4a:1a:62:29:e9:74:0a:
         86:3e:7a:1f:5f:bd:79:f1:6b:01:4f:b9:cb:f4:52:dc:2b:00:
         11:5e:71:ef:d3:6c:9f:32:82:76:90:90:95:fa:97:77:71:d1:
         44:5f:7e:02:5b:8e:ea:49:4a:a5:c2:a7:44:c2:78:8c:3c:75:
         49:9c:ae:df:fb:30:72:14:ca:a5:f1:98:cf:8f:7d:8e:2a:91:
         fd:de:87:47:db:70:52:a2:fe:3b:87:9f:74:0e:0f:11:72:46:
         32:c7:5f:e8:87:5f:cc:95:42:66:f9:46:58:6f:ac:f8:12:4a:
         cb:c3:5d:97:e7:18:11:32:ee:5d:bb:52:75:b3:c0:9e:b8:8d:
         62:61:27:80:b8:7d:6a:37:57:a4:e8:9d:db:22:d0:99:df:30:
         f2:32:64:33:db:32:31:29:91:98:4b:51:55:2f:52:33:b3:aa:
         bb:82:6b:19:9f:4c:20:64:a5:1f:cb:e1:b0:2f:f6:d3:26:c9:
         37:c6:fe:8f:7a:dd:81:4b:81:2b:61:9f:08:1e:17:19:c5:e9:
         a6:1a:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----