Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File:                     1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier:          7h4T1/DRr6KdW/wGM4FpwGgNa+drY54UZhWI6InqqzI=
Subject key identifier:   70:EA:6E:17:21:DD:96:9B:4D:58:0E:35:62:8A:F0:97:8A:4E:F0:79
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer:       /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial:       01962F74CB2BC77A23A6B620450C31AEB85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number:          0C73
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: xXR5YTe96ngfjMl9rRyLMmCySpKzrvzThVLMBVrk5Os=)
                          2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:2b:c7:7a:23:a6:b6:20:45:0c:31:ae:b8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=70ea6e1721dd969b4d580e35628af0978a4ef079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:a4:64:cd:b1:3c:e1:6e:c9:4e:85:66:09:
                    dc:b8:ff:15:30:7d:f3:9c:0f:92:57:4c:be:00:91:
                    a4:c3:e0:2f:0c:3c:b0:75:e9:5e:f3:16:1e:bd:a9:
                    3c:86:06:de:7f:59:5b:e9:34:db:17:92:26:a9:67:
                    73:5a:4a:fc:96:9c:00:15:b5:ea:54:0c:e5:10:c7:
                    43:b4:20:f1:75:85:3b:00:42:b4:a5:91:60:dc:0a:
                    1d:0c:50:6b:8f:7d:66:a7:10:76:63:d3:a3:a8:3b:
                    1d:21:1a:32:56:3b:6b:d7:69:d9:7a:54:a0:ca:ee:
                    ff:60:84:7b:63:46:e3:3e:ad:8b:96:39:d6:4d:26:
                    a3:36:37:7c:fd:af:be:c2:98:b7:38:d0:ef:84:54:
                    e0:cf:45:58:88:cd:ca:fc:10:04:63:cb:8b:f8:4e:
                    a1:11:05:4e:35:e0:13:d4:8f:37:96:c2:ea:e2:d6:
                    c5:64:f4:2d:2b:b3:ac:42:d8:7d:a0:8a:67:27:79:
                    39:ac:3b:2c:56:e4:9e:49:ba:1c:3f:4d:dd:bc:7d:
                    cf:3e:9a:90:f8:0c:1e:c9:00:e3:35:08:ad:7f:66:
                    71:05:e1:58:c1:57:37:80:29:89:c9:ce:15:65:37:
                    ab:2e:0b:5b:1e:61:38:23:61:2c:e3:da:db:ff:c8:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:6E:17:21:DD:96:9B:4D:58:0E:35:62:8A:F0:97:8A:4E:F0:79
            X509v3 Authority Key Identifier:
                keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:4c:31:00:54:88:e5:62:80:1c:69:34:f6:72:2a:b9:ad:
         58:e5:13:2b:ea:85:58:0d:cc:80:13:f5:26:04:64:64:93:a1:
         d0:02:97:14:f3:c1:25:c9:29:42:4e:07:62:5b:2a:6a:2e:34:
         1a:ce:3a:16:e7:17:24:69:dc:c8:2b:af:67:34:81:c2:1f:5f:
         65:59:17:cc:cb:82:22:89:d8:ca:c9:16:45:7d:f4:d1:94:b2:
         6b:40:f5:73:02:48:e1:f6:9d:1d:b4:24:61:53:68:fb:b2:25:
         f1:23:1d:26:eb:4d:9a:61:37:48:55:8e:d8:77:f3:36:68:fd:
         bd:d2:90:06:2c:58:70:aa:f6:ec:4b:1a:48:4e:13:76:40:5b:
         81:4a:15:0c:de:5a:ad:68:37:70:8a:9b:9f:29:0f:18:52:88:
         26:c8:39:68:6a:99:c4:d7:cf:ef:69:19:e2:fe:53:9d:e7:3e:
         b5:aa:d0:90:6b:21:1a:c6:c2:ef:8b:db:4d:50:79:3b:8f:c9:
         d7:4d:b9:a4:f2:6b:e1:50:de:38:a7:7e:7d:bf:63:8b:56:a0:
         ea:88:ff:e6:ee:ed:af:84:8f:d0:7e:13:bd:9a:60:f0:2c:ed:
         a9:5e:e6:fa:7f:10:b0:c7:44:2a:78:80:02:91:11:cc:99:53:
         ff:83:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----