Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File:                     DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier:          qtoUuIvgGEL/4ZuwGjRTzz+scFYU7SDqnR1wH23Yk5Y=
Subject key identifier:   5B:5E:76:D8:54:17:EC:95:77:4F:7B:1E:F2:C3:8B:35:AC:9C:59:EF
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer:       /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial:       01962E998F3E8570D39D781E459942A00A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number:          026B
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: M7O8rA3F/LvLYCQtMqTvSmzMOuvvXl9QvyUQ+w1chSI=)
                          2: JbFTKsYCdYTemXtCMaoCGPCb_ts.roa (hash: 9MukSppM7ZP0dLRuUTCzbpAchMnqJZvzbwM4s+EOfAk=)
                          3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8f:3e:85:70:d3:9d:78:1e:45:99:42:a0:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=5b5e76d85417ec95774f7b1ef2c38b35ac9c59ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:f9:d8:7d:b9:d1:e4:44:dc:ee:89:ac:e6:
                    a3:c8:51:d0:d4:f8:92:c7:6f:f5:f4:a3:00:c8:bf:
                    35:a3:ed:c2:4c:4a:b1:79:03:ef:c0:b2:b2:59:d9:
                    60:22:06:0d:f4:43:1c:9c:ef:4b:f0:53:53:1e:6e:
                    64:c4:00:38:5d:1c:5a:11:bc:08:1b:57:00:4e:d1:
                    2e:21:46:7a:70:08:1b:14:93:46:f1:11:81:37:d6:
                    e8:b0:7b:a8:b7:b0:3f:41:89:cd:52:b5:b2:83:81:
                    e9:2e:cf:00:ac:be:7d:85:3d:89:7c:3f:ae:92:32:
                    2d:57:a4:10:9a:90:50:ab:5b:6b:25:87:a9:25:e6:
                    15:b9:02:fc:e0:d3:fa:e5:72:e2:06:f5:c5:ca:b0:
                    8b:50:eb:52:ea:18:15:a8:69:28:22:bc:a4:3f:d5:
                    47:7f:fd:b0:a3:05:82:8b:7b:04:bb:d0:5f:9f:dc:
                    8e:7d:eb:55:6f:43:98:3c:14:4d:62:e1:1f:2f:16:
                    9d:6c:41:91:c1:0d:c6:d4:81:97:36:9a:34:6b:23:
                    0e:e1:1d:73:9a:94:20:7d:59:5b:78:30:d6:7f:11:
                    04:c3:44:59:f4:45:ac:2b:9d:c4:b6:17:f8:92:2d:
                    18:ff:37:fa:d7:b9:1c:f1:c1:08:35:06:e5:f2:16:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5E:76:D8:54:17:EC:95:77:4F:7B:1E:F2:C3:8B:35:AC:9C:59:EF
            X509v3 Authority Key Identifier:
                keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a6:68:f4:8a:ae:5d:a6:5e:c4:b0:c9:7e:2d:01:07:41:d9:
         ba:dc:60:24:65:9b:48:5f:75:93:20:15:d4:98:c6:4d:98:32:
         8f:da:4a:bd:48:f3:bc:be:61:93:79:44:9e:91:23:6b:80:9a:
         ee:57:52:67:f1:23:5a:e4:6f:a2:4c:a0:61:56:33:f4:3a:54:
         d6:36:67:27:bb:79:06:8a:e1:29:36:66:d2:a1:20:bb:19:68:
         36:a5:5e:8a:42:d3:f1:9d:6a:12:eb:7a:2c:0b:84:f4:d7:50:
         45:67:63:d7:12:99:5c:06:68:1e:76:94:2d:0a:79:ce:2d:ae:
         52:a6:eb:6f:68:9b:21:68:eb:d4:6c:f6:1f:a7:e9:e2:bf:c4:
         8b:70:cb:62:14:b5:db:c4:71:ee:51:eb:01:d7:ea:50:48:be:
         21:af:ee:5c:78:0b:15:81:88:7c:ce:eb:5c:0b:8f:42:11:df:
         32:19:2e:65:7f:1c:fb:42:fd:46:24:2e:c3:60:fe:00:ea:e6:
         04:ba:df:67:9d:fb:77:69:09:c8:ea:f2:50:42:44:22:fa:8f:
         33:d9:03:44:54:45:58:1b:f8:06:e8:3f:b0:91:71:57:a2:aa:
         d7:b3:c3:7a:8e:74:a2:cd:64:72:c9:ea:4a:d8:44:e6:1e:3b:
         08:d3:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----