Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File:                     DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier:          WZeFyTj1nP8Pa0IBBGXSa+to+orar7r627f/KLgY3jQ=
Subject key identifier:   FA:DA:13:0C:23:4B:54:F9:E3:FA:B6:D3:03:A0:D1:32:BA:DF:18:1D
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer:       /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial:       01962F069200F044F046B4CE6A97F7B9B8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: Gl0DACFPZ5gjFuIX0lTFgAWpaMQqlVDaf8a5KgiSGs0=)
                          2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:00:f0:44:f0:46:b4:ce:6a:97:f7:b9:b8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=fada130c234b54f9e3fab6d303a0d132badf181d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:9d:87:8b:46:fa:b6:08:87:06:33:8e:61:
                    88:5f:10:3e:0c:30:5a:47:70:0e:50:e2:64:54:3f:
                    d8:2d:93:80:d4:50:8a:28:7f:88:9a:35:3e:d8:e6:
                    5f:e2:f1:68:73:62:8e:cc:62:f6:38:44:7d:54:91:
                    bd:68:11:87:c9:33:db:b7:4a:19:5a:66:2e:b4:7f:
                    fb:22:55:50:42:46:78:c4:af:2f:80:e1:1e:a5:22:
                    bd:56:d0:95:dd:9c:c1:0c:32:84:5d:99:0c:e4:11:
                    c5:f9:79:87:0c:3d:a2:54:9f:6a:b4:33:59:e6:52:
                    99:1a:09:b4:8e:46:65:ba:ff:9f:da:49:53:c2:c0:
                    55:37:c2:fd:88:43:00:f6:be:13:2f:44:fb:ce:12:
                    4d:d5:a2:7b:d7:eb:f1:7b:44:2a:ef:b6:49:f7:60:
                    a3:fd:31:cd:63:a6:f4:c7:e2:8d:46:a0:22:6c:33:
                    26:67:27:5b:0f:24:1e:23:be:21:ae:7b:7e:1d:7e:
                    20:fb:72:5a:b1:12:92:4d:e0:0b:9b:61:cd:36:f4:
                    a5:9d:10:64:d0:36:fe:e4:df:96:c8:e7:5a:72:08:
                    94:1d:48:7d:a5:a2:99:23:21:db:32:39:e9:d9:5b:
                    ee:42:6f:8b:55:99:b4:45:86:ec:a2:95:a4:69:57:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DA:13:0C:23:4B:54:F9:E3:FA:B6:D3:03:A0:D1:32:BA:DF:18:1D
            X509v3 Authority Key Identifier:
                keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:ad:cd:c2:40:3f:a6:3b:4e:ed:cd:e4:39:f7:dc:00:32:
         8c:b0:4b:30:62:32:21:0a:18:68:f7:eb:a1:fc:8c:14:0b:f1:
         00:1a:a0:f0:bf:75:dd:18:1c:99:38:2b:30:ae:e5:4d:ca:27:
         30:c4:86:bd:64:db:95:f8:1c:f0:05:16:a8:23:bc:53:71:30:
         cc:3a:53:82:b0:ea:26:b3:8d:08:35:b2:cc:a2:24:ef:d2:9d:
         1f:91:dd:16:f3:ff:6e:de:62:49:95:7d:cc:3b:57:9b:b6:59:
         b3:53:2c:8e:aa:a5:14:01:0b:d8:ec:36:e5:a4:96:71:8e:26:
         d6:db:a9:51:20:fd:92:4a:3a:b7:e7:5b:c0:69:9c:81:e2:52:
         76:26:68:70:3e:fc:2b:31:76:c3:51:d5:ee:90:a7:74:0d:4e:
         86:aa:de:43:af:c1:95:9d:0a:c0:99:0d:b5:d7:09:9d:08:67:
         76:68:98:23:5b:a0:3d:cc:71:c1:5e:ba:d6:d2:4c:2f:e6:1d:
         17:b0:8f:6e:f0:16:38:f9:f5:1d:97:56:49:e9:c2:22:5b:44:
         08:4a:54:0e:75:7a:f7:c4:7e:77:cd:e1:44:44:ba:d9:40:e6:
         b7:c3:f4:ae:91:9b:0b:1a:08:fa:43:77:f8:e7:54:c8:96:cd:
         08:b0:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----