Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File:                     fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier:          /3msDywn/etP4HxeXG5bJx6vs4hghmrDJ3/bQWSVAL8=
Subject key identifier:   96:58:3F:FD:C7:5A:0B:E6:31:CA:BF:34:7B:B3:5C:7E:47:33:DA:3B
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer:       /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial:       01962F06EC97ED15114CD7757579354C5C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number:          0D44
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: pxq369D++a+9QewiMs+DGd07TFPAMpdtReCZ18YqZ2Y=)
                          2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:97:ed:15:11:4c:d7:75:75:79:35:4c:5c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=96583ffdc75a0be631cabf347bb35c7e4733da3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:49:d4:ea:e6:da:d8:e9:78:29:ae:b3:2a:
                    a6:45:78:97:8b:b5:80:73:92:20:a8:aa:0b:4e:96:
                    2b:22:c8:f7:03:c1:17:c5:1c:08:d9:5b:65:9f:b0:
                    54:78:fe:9d:41:ea:34:b7:79:9d:1f:32:d0:43:ee:
                    df:20:8d:34:16:d6:2b:3f:d3:ac:a3:22:44:8b:28:
                    64:13:67:30:15:0c:3d:2f:2c:91:e1:c5:a6:93:28:
                    62:1b:96:d4:ff:0b:3b:fa:b2:f9:99:e7:5c:34:95:
                    aa:c4:2b:bf:6b:41:cb:8b:66:b0:c0:22:89:7d:02:
                    4e:c5:a3:58:ca:8f:28:b2:0f:81:0f:f2:62:61:70:
                    b6:d7:a6:11:69:89:a5:89:8f:83:0f:1e:db:fb:42:
                    9a:00:00:e9:16:24:8d:aa:06:4f:e4:75:66:dc:e0:
                    25:ce:05:f0:34:90:de:d4:0d:f7:8e:40:bb:91:d2:
                    5a:9d:1e:ce:86:19:41:ba:48:17:f0:e3:b4:c0:15:
                    d4:9d:e9:3e:34:48:35:c3:6c:06:a2:ad:34:d7:da:
                    c1:26:3c:fd:ca:b1:84:3b:1d:54:8a:9e:13:af:4a:
                    a8:23:b2:59:1b:a6:fd:ed:87:19:e4:63:bd:2b:24:
                    df:75:ac:30:7a:d7:1b:b3:f8:70:78:78:7b:23:6b:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:58:3F:FD:C7:5A:0B:E6:31:CA:BF:34:7B:B3:5C:7E:47:33:DA:3B
            X509v3 Authority Key Identifier:
                keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:d7:22:66:31:07:22:80:bc:76:44:c8:0c:f2:45:67:af:
         12:ec:63:04:90:ab:6d:e3:50:d9:d5:23:c1:40:a6:40:27:42:
         e9:42:8e:de:39:bd:42:71:34:31:ad:f4:93:b9:08:8a:b8:ca:
         96:60:23:1c:8a:d0:2a:c6:71:ed:63:bf:a2:a2:4d:1b:95:8a:
         24:25:1d:86:f8:0b:70:a3:36:b6:1f:b2:93:b0:a0:c7:91:59:
         21:52:ad:46:b7:f7:5e:dd:3e:64:a1:29:b5:7f:2c:b0:75:48:
         98:c7:9e:ac:d9:e3:f5:2c:25:0d:ee:5d:66:0b:ff:ca:cf:60:
         07:08:a7:f2:fd:77:3c:54:22:54:31:b3:5e:9f:df:72:46:73:
         f5:ea:57:a3:b9:39:17:9a:fe:cd:98:39:ec:de:ae:c6:eb:05:
         1d:1b:19:9b:41:5f:d3:4e:37:ce:d3:c5:68:69:2b:67:90:b1:
         82:2f:6d:64:5a:54:3a:65:b4:3d:67:a0:72:76:be:6a:e7:ed:
         72:f2:bf:57:08:2e:0d:eb:f1:1f:27:1f:c1:73:73:14:72:68:
         a8:db:a8:c1:69:d6:b8:ad:dc:a3:50:f0:81:2b:f4:e1:bf:5a:
         45:4b:d8:da:4a:13:a5:bc:d2:10:34:34:5d:75:e4:bf:68:85:
         e3:45:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----