Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File:                     CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier:          fgBrStSOVFC6Zxl8zeMg7njulWxWfAfpQvDA3E09UWE=
Subject key identifier:   DE:4A:B5:FE:FA:C2:7E:7A:9C:97:93:57:3D:6A:A4:D7:04:4A:DC:E8
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer:       /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial:       01962ECFAF10649A6539C6FAFF5A6B086C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number:          0F4E
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: ZQbyDn1TGboj9LWFnrMfP1CuoADjdR5WUl6eThHgzx0=)
                          2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:10:64:9a:65:39:c6:fa:ff:5a:6b:08:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=de4ab5fefac27e7a9c9793573d6aa4d7044adce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:1b:05:36:8b:5d:6e:4e:7c:79:4c:16:26:
                    99:5f:01:63:aa:77:c2:c7:b9:36:c0:c1:4c:14:94:
                    22:94:16:ab:96:91:22:a3:ec:a3:71:9b:e4:ab:68:
                    f9:b8:17:1c:70:31:d5:f8:93:90:eb:46:2d:5f:f8:
                    d0:ea:fc:92:0c:3e:63:de:05:4e:84:d6:66:62:eb:
                    58:be:fc:df:5f:10:63:57:1c:f9:28:f8:55:9a:ab:
                    01:b9:59:93:8b:28:c3:af:72:dd:cd:27:ee:2e:73:
                    82:e2:57:2b:cc:20:bd:e8:1c:2a:56:3f:63:64:31:
                    23:1a:85:54:59:d5:58:be:d9:23:8a:3f:2c:0e:55:
                    49:e6:b1:8a:86:fe:80:76:78:03:a7:e3:9b:80:a1:
                    88:fc:39:bd:e8:93:5a:76:c3:8a:d7:86:c1:d3:07:
                    02:58:d9:95:54:a9:b0:12:34:72:6e:84:5a:21:02:
                    58:9b:f9:87:f7:89:c4:9e:fd:68:7c:99:d2:d9:09:
                    4b:b3:82:18:de:83:68:1b:c3:33:52:42:78:09:cd:
                    11:90:1f:b7:65:f1:c6:7e:fb:6b:52:10:cd:52:ac:
                    51:cd:fc:4f:82:be:c6:f8:c2:1c:51:2c:da:6c:39:
                    65:ed:5f:55:c3:9c:e5:b0:72:f7:82:4b:70:8d:76:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4A:B5:FE:FA:C2:7E:7A:9C:97:93:57:3D:6A:A4:D7:04:4A:DC:E8
            X509v3 Authority Key Identifier:
                keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:26:80:73:86:78:26:9d:cc:c6:e0:20:e0:55:73:90:59:
         29:42:48:74:0f:db:2c:c4:b0:a5:e7:ef:4d:42:9c:1a:2e:26:
         85:28:9e:d9:44:80:79:7c:fa:9a:fe:aa:a6:f8:31:44:d7:b2:
         09:8f:11:d6:b0:3d:5f:1b:b7:91:38:af:e3:5b:6f:a0:a0:34:
         fa:7e:1e:11:d7:43:9e:35:05:6b:be:35:4a:a5:fc:d1:9d:92:
         39:cd:cc:0d:49:c5:80:f6:e6:3e:c0:bd:53:bf:b6:3c:eb:83:
         33:f7:55:27:50:72:23:15:bb:c6:2a:e1:e2:cc:af:df:7f:6a:
         f7:0a:55:6f:27:ff:f6:d7:d0:03:9a:7a:af:9a:52:ba:28:bd:
         83:f3:98:51:57:b2:38:4d:d2:74:4d:17:db:5a:2b:ae:c0:d3:
         a9:93:84:ef:19:10:7b:4e:4a:18:d7:b0:58:f0:05:27:17:97:
         c6:c8:ff:1b:96:da:1f:93:f9:7f:f3:e8:88:69:82:a9:e3:ab:
         ca:34:4a:94:6e:98:cf:cd:ad:b1:35:0e:14:36:ca:1a:5d:a1:
         71:66:41:f9:ce:d9:70:0e:38:01:50:d6:6a:a8:cd:cb:b3:2d:
         ac:96:e0:86:c9:e0:f7:17:56:74:de:20:c1:ac:94:6f:91:8a:
         67:fe:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----