Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File:                     dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier:          z+bCpobQaTIrBh9SvxCogNgPMPSVMH9l0TO+N57XJM0=
Subject key identifier:   22:F0:48:C3:25:2A:3A:EE:BF:4F:B7:D2:09:CB:BC:32:26:AA:5E:10
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer:       /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial:       01962F06F5D2EA87D6B315A25CC2ACE0C3C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: +cNUCYgDKiqVfNR8dnEx3alhGkbnjEZTfgm/aEc9O34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:d2:ea:87:d6:b3:15:a2:5c:c2:ac:e0:c3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=22f048c3252a3aeebf4fb7d209cbbc3226aa5e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:03:b2:8d:ed:40:b5:e5:72:4a:19:f3:cb:
                    0f:84:e3:af:83:07:26:14:0e:46:f0:56:82:ed:77:
                    fa:dd:c6:3a:19:38:a8:83:7e:24:0a:0e:de:34:f1:
                    a4:c7:ac:93:24:89:2d:52:38:1a:ea:33:98:a1:35:
                    34:0e:c6:bc:2a:ed:d2:15:48:1b:20:71:ca:5d:39:
                    7d:c2:c3:f9:89:7d:07:05:1d:74:40:ba:b5:16:26:
                    b8:b8:bd:a3:a8:a7:53:4e:a5:28:11:81:cd:5d:78:
                    05:70:77:1c:f9:cf:4b:4a:b3:70:f8:12:03:88:86:
                    5b:e6:ad:dc:bd:e3:f0:74:3c:68:bf:81:0f:33:48:
                    e1:14:22:4a:95:5d:1b:93:55:16:38:40:f3:75:4b:
                    63:6d:7a:a5:21:e1:ea:c6:3d:b4:a9:bf:bc:d8:5b:
                    ad:41:0e:b4:3e:e0:e6:3e:a4:57:e5:8b:56:45:be:
                    26:95:33:af:52:4a:a1:09:1a:fb:7c:79:6b:cb:21:
                    7e:dc:96:cd:0b:08:2b:20:1c:9c:65:49:21:82:f6:
                    13:de:6a:08:da:41:51:a6:f5:8c:4e:53:f1:df:7c:
                    76:68:c3:28:76:8b:5a:e2:15:0c:55:3d:ed:28:f9:
                    b6:b4:1d:7b:0e:46:c6:3a:61:21:2b:55:ff:7d:ee:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:48:C3:25:2A:3A:EE:BF:4F:B7:D2:09:CB:BC:32:26:AA:5E:10
            X509v3 Authority Key Identifier:
                keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:8c:9a:11:ff:78:e9:69:3d:78:eb:e0:30:95:41:e6:ba:
         96:94:77:0d:c2:0b:77:a2:b3:79:11:c7:a0:ec:fc:4e:9f:7a:
         4e:0a:96:86:8e:d7:90:f9:d6:f3:51:a1:89:e7:74:88:47:81:
         20:02:4a:6c:72:35:5c:87:ad:19:ac:5f:2c:1d:12:8b:91:f4:
         3b:d0:c3:9b:a8:26:2b:ee:87:4a:be:f6:3c:7d:4a:1d:ae:4b:
         aa:a7:c7:1a:a2:a7:c8:52:4f:d1:93:ac:80:9a:eb:36:d2:f8:
         ad:7c:06:2d:c0:90:a9:3b:df:7e:68:88:39:31:1c:d3:c0:79:
         87:1f:ee:69:36:5d:e5:ee:27:d9:e2:f1:dc:25:63:da:3e:9e:
         cc:79:c6:0d:c1:81:3e:df:1d:40:5f:99:5f:2b:c3:67:97:da:
         5a:49:52:ab:b4:d8:95:ca:37:66:2b:96:97:a7:32:82:ad:48:
         cb:3d:d7:6e:f9:90:91:e2:1f:1a:f6:38:7b:7e:0f:ec:a2:34:
         80:e0:23:90:3c:c2:45:c0:0c:1a:80:7d:35:19:20:16:ef:2f:
         41:fe:3a:bf:64:15:47:b7:96:78:59:bb:61:50:27:df:9e:55:
         11:c4:e9:50:0e:67:4a:c6:04:c9:ed:7a:a0:71:60:c4:56:a3:
         c0:82:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----