Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
File:                     V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft (raw, json)
Hash identifier:          EHgcEJIbL3673EXvr5Lc2i4c9xdIP8rWxw+8oEYe+Fw=
Subject key identifier:   DE:21:4D:7D:99:A6:32:46:24:A5:9E:EC:D9:26:D0:67:F6:E3:95:CF
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Certificate issuer:       /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial:       01962F743801FC5EA282550BDC5EFF9B5410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 0HQu8Zx0bqoT8VblZx7T-KABTMs.roa (hash: PMmgS2CzSt2RGIZOxQkouUiRA5CO+OAI06wmRBvm14c=)
                          2: HAFTWYZhRl2JhSvJ17kRi_EORRw.roa (hash: 19em40Igf72cORttMpVzO/f9hKOd+3zplkZkJTc0zOw=)
                          3: V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl (hash: 2/9k+Xlk+hWA69f0PhnJ1qY/ZR5vNAoJtIYH0b7x6PQ=)
                          4: XzHbUO4u5QutpWYtZyqfUUIrRTI.roa (hash: dO0CtFUpXZ4k5F0vBkaTPTnFApdf6AbyjKu5COO/Zms=)
                          5: yQx5YUSfcqcgx3IA4ICMejwqPbs.roa (hash: cBatkYbqWez1EI7dU65y7uQSmyGeXkq58ToIkxccLCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:01:fc:5e:a2:82:55:0b:dc:5e:ff:9b:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=de214d7d99a6324624a59eecd926d067f6e395cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:f0:a3:00:7e:70:f5:09:85:0b:89:a3:c8:
                    da:53:f9:08:80:c7:e2:20:9d:bb:5d:ec:a7:57:c9:
                    be:a0:65:56:4d:84:fc:4f:78:bf:c5:8f:82:00:8a:
                    bc:55:bd:ed:44:58:9f:ab:f4:10:c5:0d:7c:30:68:
                    ef:c5:fb:b0:d0:49:36:8e:4b:7d:67:cc:cb:31:6e:
                    57:ac:2a:c0:b8:e5:85:0b:ee:eb:61:36:8c:f9:27:
                    5d:0d:bc:4d:63:a8:e4:2b:9f:83:5a:1b:24:02:f6:
                    2a:e7:77:97:5d:c4:6f:21:16:ce:25:97:d9:9d:49:
                    54:14:8a:eb:ba:52:e9:18:f4:38:48:c6:90:dc:48:
                    b8:a5:b5:cc:bc:21:6b:43:14:49:55:8f:98:3b:5d:
                    28:c0:4d:94:01:00:73:62:12:54:26:86:75:82:f6:
                    9b:99:72:f6:2f:14:8b:98:d3:b1:f0:ea:18:00:d9:
                    1c:6a:c2:90:cf:34:64:7d:8f:ce:7e:88:b6:96:c6:
                    18:50:b0:f7:80:c5:94:ae:e3:e6:f8:50:49:8a:85:
                    51:6c:5c:e8:20:a4:09:57:6b:45:69:77:1d:77:2c:
                    9e:db:09:51:30:f6:9f:37:9f:bc:48:90:7b:82:37:
                    0c:9c:10:5c:9d:27:82:4c:c9:db:1d:b8:8b:40:d5:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:21:4D:7D:99:A6:32:46:24:A5:9E:EC:D9:26:D0:67:F6:E3:95:CF
            X509v3 Authority Key Identifier:
                keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:be:5d:b5:ad:04:db:f1:99:e0:02:ed:67:a6:26:a6:91:
         2f:b0:e1:29:a0:35:b7:e1:84:e4:75:55:a2:41:0f:d9:ce:80:
         ba:77:49:b6:1b:1e:ee:c9:a3:2c:ad:da:3a:86:d0:d6:c7:ec:
         c2:c7:f1:35:cc:3d:d4:a0:60:d5:99:37:82:1d:7c:a8:83:43:
         b5:0f:b4:94:07:5f:05:0f:2f:28:a9:e9:0e:48:0c:62:e6:4e:
         b5:1c:6d:6f:d5:39:86:fa:94:69:1b:a1:90:c5:91:43:0b:4c:
         d1:e8:99:61:32:f8:61:7b:c8:be:8e:30:63:f2:04:81:a1:bb:
         94:9f:f4:23:9a:0f:72:8d:98:80:8c:ec:21:b3:23:94:ca:13:
         34:75:3a:02:b2:83:51:ad:80:80:15:9a:08:a7:d9:84:ae:df:
         e3:5e:b3:4a:8c:20:c0:6c:ad:13:ae:f6:64:8d:cd:0d:2e:a0:
         dc:f8:14:b0:72:c4:de:57:b9:91:6a:24:e7:5e:32:88:37:7b:
         a6:cb:ca:76:df:c3:a4:f2:00:6e:52:57:6a:4c:e7:bd:3a:dd:
         71:fa:18:69:eb:6d:e8:31:fa:c4:87:d1:9d:ca:0a:b8:61:6b:
         9e:31:a6:77:01:28:8c:e8:41:62:04:44:37:d9:02:e2:c7:5a:
         38:da:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----