Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File:                     djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier:          UHvHay3YtZwpb6Gl4lVJTnEQ9ZY45rZ2lSjGdeE9UZ8=
Subject key identifier:   18:FC:44:F6:8C:67:01:9B:D3:C5:15:0B:52:B5:BC:07:9F:13:FB:93
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer:       /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial:       01962F74A8C3500EF65059518C815F753E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number:          45
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: 01xHs8WwqXMv0M0hQ0isR1fmlW7jDV9yT1tlu4/NVPs=)
                          2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:c3:50:0e:f6:50:59:51:8c:81:5f:75:3e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=18fc44f68c67019bd3c5150b52b5bc079f13fb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:62:fc:4e:29:6d:62:d5:9a:dc:ca:53:d9:
                    35:05:b0:8e:19:52:d4:52:ac:c0:54:a9:8f:87:70:
                    e3:fa:b8:27:2f:88:6e:c7:3d:7e:f7:c6:e4:ff:9a:
                    c5:58:7f:c6:7a:b3:1d:19:e6:76:77:63:13:55:92:
                    bd:26:a8:6a:7a:6f:fd:ad:98:65:d7:da:4d:ba:59:
                    c8:7d:2c:fb:ff:c5:89:af:39:37:fe:e0:4b:5c:db:
                    a0:63:ac:25:49:82:a0:b0:0c:eb:dc:94:b3:59:d1:
                    71:a2:ba:6b:1d:7e:a8:e8:11:5a:ad:2f:41:82:84:
                    44:77:80:f8:33:48:0d:d3:7b:be:fb:9b:39:cd:44:
                    09:d3:c4:78:a5:25:46:ed:85:1c:5f:4a:33:6c:3a:
                    87:22:34:6d:87:51:ca:50:5e:6f:2e:bc:94:f1:92:
                    2f:ca:6f:ec:da:ed:8c:b7:b0:77:bb:4e:6e:c2:96:
                    e4:ae:4f:68:b8:43:62:3d:29:05:83:f7:27:fa:7f:
                    fe:92:21:9e:69:4e:8a:76:f3:81:3e:fb:4f:b7:0a:
                    a7:7e:77:03:81:1d:bf:3a:d9:19:56:4a:39:18:aa:
                    46:47:ed:f5:70:12:f6:1b:84:7f:c8:61:f9:fe:ff:
                    28:71:aa:bd:2b:a8:dc:aa:e6:68:73:3c:ca:64:81:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FC:44:F6:8C:67:01:9B:D3:C5:15:0B:52:B5:BC:07:9F:13:FB:93
            X509v3 Authority Key Identifier:
                keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:72:3b:51:14:46:f1:9d:c0:59:0d:59:67:d6:5f:92:c9:
         fe:a6:f2:da:47:72:71:51:c2:c8:0f:2a:56:e5:ed:f0:c8:cc:
         bb:64:a6:73:8a:26:e2:30:fe:89:11:f7:a1:52:00:64:e0:a1:
         27:c3:b9:15:af:55:98:43:e5:5a:35:00:97:e7:c9:cd:64:2c:
         2e:86:ee:ad:b3:9d:5a:7e:cd:a7:23:ba:4d:bf:33:ed:03:98:
         a4:4d:42:d3:d1:33:1e:af:0e:ce:21:ce:1d:5e:ee:99:45:14:
         fa:c2:71:ac:71:fc:14:f4:fb:2b:54:f8:c1:9b:54:25:d7:1b:
         f7:5e:9c:d8:5b:01:2b:30:78:dd:61:e3:1b:8c:0a:0a:c0:79:
         89:a2:9f:5c:61:46:ab:f5:45:be:e9:10:b5:f3:47:3f:fc:d9:
         0e:49:b1:56:ff:65:6b:66:c4:8b:4c:ab:39:06:de:ea:eb:51:
         18:e9:fc:a5:ab:c7:20:54:2f:b9:8b:5f:65:db:56:88:31:92:
         a2:7b:42:bf:48:f1:fe:ea:fb:07:e2:b4:00:77:cd:f9:88:31:
         05:ac:c1:6a:26:19:bc:d7:0b:a7:5d:5d:4c:59:d5:e4:ff:da:
         64:68:44:79:a5:dc:81:ed:01:0b:97:3f:4c:28:ce:c4:3e:dd:
         c4:ef:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----