Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          9t5m0JLWEccwoVtnsFiFvDQ4ka0/VfclySiyBhJ2OnI=
Subject key identifier:   7A:4E:4F:41:87:6A:11:B5:35:92:9B:97:70:83:ED:FC:30:F6:D7:C8
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       01962FAB3C20D542A1B5E40684882E1C52B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: 1dTwwO3MwhUeTuEjV1EE/9Uadegk3KKRUFnQPRtJsnU=)
                          2: 1-ZNTPcQUw8PaedWPij0FjBg6iOY.roa (hash: hVPLICluHooRq9Tlz1cpYKX47tdy3LL3+Q3QLkvNJ5E=)
                          3: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (hash: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=)
                          4: fXqeDNUF09E57BXRF0QIls-uZ44.roa (hash: hJ/0oVyr/hUhxK31bOGJWQ8EL165OcYQ6RwEzy2jKI8=)
                          5: uGd2svx2nM-ThRz4Z5ZLS4pryPE.roa (hash: miR6GHPuEFoodfHk/rc71EoG5Q+xZw/Ncoa5ppurE4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:20:d5:42:a1:b5:e4:06:84:88:2e:1c:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=7a4e4f41876a11b535929b977083edfc30f6d7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:9f:90:0f:7f:ba:1e:bf:a9:65:77:dd:1c:
                    b4:64:79:14:98:4d:7e:4d:b6:b5:37:34:df:9c:40:
                    f1:77:72:36:85:48:37:e6:08:98:b1:f6:9d:82:1a:
                    c3:cd:60:32:e9:c7:da:0e:90:d4:de:2c:f9:03:06:
                    f2:0a:b1:88:47:80:d9:b0:69:1b:5e:1b:cf:fd:de:
                    26:ac:11:4c:04:f2:ac:10:53:ea:c4:8a:ac:92:a2:
                    5a:f5:bb:1a:33:24:7d:df:b4:fd:ab:34:b8:b3:51:
                    36:e9:b1:10:5d:d4:6d:74:44:45:b0:02:d4:c3:3a:
                    87:47:76:3b:e9:56:47:52:43:76:34:b9:69:75:59:
                    f7:7f:f6:73:eb:de:93:c1:2c:dc:49:4a:dd:ab:d6:
                    76:1b:dc:aa:fb:7e:3a:da:71:5b:31:04:7d:a6:2c:
                    42:b2:a7:48:4b:55:f9:ae:b2:96:e9:88:17:f9:85:
                    7e:9d:a7:b4:53:dd:2b:28:9b:00:08:d5:01:93:05:
                    77:6d:7e:2e:a9:6b:87:30:4a:1b:09:9a:c6:ed:3d:
                    27:49:eb:8b:6c:92:c1:bd:e6:08:3e:f2:58:33:f5:
                    0f:2d:f4:41:65:24:e7:a0:f1:aa:ed:30:cc:72:8b:
                    fa:f9:12:ea:8b:a7:6b:ec:aa:ef:3e:50:8d:07:b0:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4E:4F:41:87:6A:11:B5:35:92:9B:97:70:83:ED:FC:30:F6:D7:C8
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:67:93:44:95:b8:f5:f3:84:90:03:3a:59:4f:26:b8:8d:70:
         0c:b3:85:63:05:94:8b:6b:58:c7:ea:db:a8:d7:63:7d:72:99:
         96:6c:00:0e:8c:33:48:89:b5:5a:a4:29:2a:bc:19:dc:e7:e9:
         73:b8:ba:be:c2:15:23:d5:cd:5a:ed:aa:2f:a5:a8:eb:20:65:
         20:a8:73:4f:a4:c3:fd:d6:3b:5e:1e:16:8c:b7:7d:d6:b7:98:
         75:36:98:7d:98:cd:c0:d5:b0:e1:c4:f1:c4:ee:16:5c:9d:df:
         df:f5:f9:d3:11:a4:09:97:4a:b2:51:08:98:29:db:bf:0c:0d:
         1b:12:23:55:40:2b:1b:04:73:f8:42:7d:32:aa:b0:00:ac:21:
         6a:75:e9:2b:c5:6e:23:e5:42:91:1a:71:95:6e:8b:72:87:e5:
         96:fc:7e:28:3c:6c:b0:34:91:c2:e8:01:77:0c:7e:2b:72:cb:
         4c:8d:9b:ee:8a:c4:25:b2:b9:99:36:cd:58:01:ed:ce:e2:37:
         e7:c9:6c:9a:b1:2a:34:13:03:e7:b6:cc:ac:52:db:98:d2:91:
         d4:06:18:80:0e:2d:d5:7a:b4:b4:50:41:98:45:5b:32:df:4c:
         d7:d3:c9:07:85:49:c3:51:a7:46:40:9b:25:95:1d:1d:d0:99:
         6d:4d:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----