Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File:                     v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier:          xfpu4WM9K41PwAp29w4hunhRxCT5emt6xHoHOAYxBJo=
Subject key identifier:   D3:3E:85:8C:06:87:47:3E:E5:CC:E2:43:48:98:26:C4:5A:ED:E1:15
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer:       /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial:       01962F74CF302350233493C00CB5FAD6A9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number:          01CA
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: 7DIgZ//+w5oTcgrAt4myOjBwsd7BB2++s7stP44orvI=)
                          2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cf:30:23:50:23:34:93:c0:0c:b5:fa:d6:a9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=d33e858c0687473ee5cce243489826c45aede115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:11:3c:b3:6f:52:13:60:a6:ae:18:b9:83:
                    89:67:7a:86:51:6c:18:e1:58:d9:d1:71:d6:3a:21:
                    5b:66:e8:52:19:c0:46:10:2a:12:70:b2:5e:85:19:
                    bf:88:03:d2:94:22:ba:1d:bb:8e:b2:14:83:a5:9b:
                    c3:97:da:64:05:a0:e9:83:a5:fb:a1:3e:e7:e2:3f:
                    80:d3:c0:86:9c:28:7e:1b:c3:5d:8e:be:1d:43:b0:
                    72:5c:15:70:55:e9:3a:bc:dd:e3:6d:84:a0:4b:68:
                    8b:e2:91:6f:66:22:e6:da:3c:3e:b0:dc:81:a8:7a:
                    de:1b:45:8e:74:67:84:c3:68:85:6d:bd:ab:78:e8:
                    6c:22:be:09:90:e1:07:e6:41:45:25:1e:5f:a8:b9:
                    4d:8b:07:a2:1a:5e:84:23:68:b1:2f:16:a1:16:5f:
                    b3:32:4f:c0:4e:17:1a:f0:a3:97:db:94:f5:11:3d:
                    e3:cf:ae:9f:de:aa:4d:cd:8a:b3:c7:bc:cf:29:bc:
                    35:f7:fc:a5:23:ff:25:87:d8:71:5e:61:29:83:4b:
                    24:f5:03:79:73:c7:06:05:4f:35:97:8c:68:27:c8:
                    8c:4b:4b:b0:b3:03:3c:b7:69:af:bd:e4:1c:df:34:
                    b1:a0:b9:f6:1a:68:70:25:19:e7:21:66:86:5b:dd:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:85:8C:06:87:47:3E:E5:CC:E2:43:48:98:26:C4:5A:ED:E1:15
            X509v3 Authority Key Identifier:
                keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:60:03:ef:09:23:95:75:76:21:f2:0b:a4:fd:eb:fd:32:68:
         9d:89:fd:e5:2c:eb:f0:9d:fb:a2:6b:f4:06:a8:2a:dc:e3:0e:
         46:11:f7:15:ff:c4:15:9b:5a:6e:a4:05:e5:59:22:c9:4d:55:
         53:b6:42:1e:7d:ee:7d:f4:ed:e1:22:2d:d5:2f:dd:09:f1:6f:
         6c:8c:5e:a2:d5:d1:a2:48:c7:28:ee:d8:49:53:2e:62:a0:2c:
         93:ab:e5:fd:a0:d6:6a:c7:31:24:39:dd:81:dc:de:b2:ab:55:
         99:f1:bc:cd:52:37:9f:97:4c:d6:64:6d:28:5b:d9:32:4c:84:
         8e:bf:5a:e3:ad:a0:aa:e5:ca:22:ca:15:cf:e1:ef:89:3e:c3:
         93:5c:27:65:d6:08:f0:e5:a9:34:59:3e:4d:42:b0:33:ae:d8:
         13:c0:4e:26:8a:e7:a2:be:3d:73:66:3f:6d:ee:9b:3a:6f:24:
         21:2a:0a:67:f8:94:74:87:77:82:06:b0:bd:b2:23:07:b5:a6:
         53:4d:14:dd:a1:ba:54:49:44:bf:24:fb:fe:95:aa:5f:ca:3e:
         93:03:f2:a2:7e:8a:a7:6b:1a:c5:5c:39:14:55:0d:43:66:02:
         c7:ee:76:87:aa:37:4f:67:11:ca:d5:d9:0c:1e:31:a3:93:51:
         92:bb:55:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----