Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File:                     Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier:          p5Zu91x+CDyuVvr/4eMcyYUGJy4fAaawgLDOOPSnEH4=
Subject key identifier:   75:26:FC:82:F4:3C:20:D1:18:DD:51:8F:03:B0:CC:CC:38:C5:5C:12
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer:       /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial:       01962E99622FA0D15C3F9BC23C5EE571C2A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number:          1090
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: udZhPpBM+3o/7jQAxmYk+oZW7MhGbNQvRBG1TbxcbKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:2f:a0:d1:5c:3f:9b:c2:3c:5e:e5:71:c2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=7526fc82f43c20d118dd518f03b0cccc38c55c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:07:c6:4a:dc:79:91:f0:31:98:ff:e1:a1:
                    33:46:ef:c0:96:7b:f4:02:1c:ec:58:53:53:45:a3:
                    77:04:b9:ec:a0:f9:19:52:12:52:a2:0e:ba:d4:21:
                    6f:22:da:0b:01:6f:26:9f:2d:09:5a:6a:a9:ba:ac:
                    a6:2c:e7:a5:f3:f1:ee:69:04:00:c9:3a:bf:2f:28:
                    99:2e:5e:af:27:8b:10:4c:7a:d2:77:a1:dc:c2:ca:
                    36:33:d7:05:80:ac:ea:d1:6f:98:8e:2d:fe:5a:d6:
                    c0:66:6f:1d:7d:7e:cc:42:01:c8:81:18:f7:5a:7c:
                    05:42:6e:74:ea:41:93:72:f6:ac:35:c7:41:79:8b:
                    c2:56:4c:c2:9d:db:e8:51:53:83:37:77:db:fb:17:
                    69:a6:8b:ce:fc:8a:32:4a:9b:4a:a3:d4:8e:74:87:
                    ed:b8:f1:89:21:9e:ff:db:ae:92:e8:94:7d:8a:fd:
                    73:51:f4:b7:7c:cb:29:33:5f:f3:6c:78:05:3b:2d:
                    b1:a0:1d:ed:d7:19:16:b8:13:bf:6c:60:d6:97:09:
                    5f:5d:b4:22:23:52:37:08:85:28:9d:19:29:d1:31:
                    b4:f0:96:d7:5a:60:a2:e1:8b:d8:17:74:ee:3b:ba:
                    1b:37:33:63:31:f5:f8:98:95:a9:12:22:5d:32:72:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:FC:82:F4:3C:20:D1:18:DD:51:8F:03:B0:CC:CC:38:C5:5C:12
            X509v3 Authority Key Identifier:
                keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:3e:b1:93:2d:d5:39:b5:96:c0:b3:a3:6c:62:93:71:f5:
         8b:10:c7:52:0d:2a:3d:fe:a3:b9:3d:e7:cd:fc:48:04:e4:81:
         be:b5:80:e7:b1:18:ba:48:24:c9:bf:38:d3:1b:e9:5d:d8:ef:
         db:89:02:ae:a7:ed:c5:1e:14:2b:4c:b5:9d:bb:21:b2:8e:84:
         f1:11:92:a5:87:97:70:0b:83:a9:b5:22:ff:1f:48:5e:d2:27:
         32:9c:5a:af:70:12:68:98:e7:81:ee:19:9a:50:fd:52:33:0b:
         ec:f7:b3:b9:c1:f7:0b:a2:fb:ff:be:fc:8d:07:e5:3f:5e:85:
         03:7c:bf:a8:a4:52:4e:37:9e:82:6e:9d:9b:4b:43:c2:dd:66:
         f1:c6:45:fc:bd:28:fd:89:e3:77:06:3a:11:bc:d5:b4:0e:8e:
         2d:3f:ea:c8:2a:b8:c0:50:8e:6f:c7:5b:d9:33:75:95:b5:09:
         9a:79:88:43:3c:61:73:18:ee:2f:c1:bd:62:45:b2:6c:3f:74:
         26:cb:95:3d:bb:4a:20:e5:ac:8d:09:c0:12:67:45:db:e7:b1:
         b4:cf:bc:08:ce:4b:1a:81:db:39:5b:fc:e8:b9:6a:c8:77:a5:
         e0:0e:3c:bd:ec:e2:90:b9:81:1b:80:b4:9c:46:5f:68:3e:7b:
         10:88:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----