Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File:                     1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier:          BKi2xPBMPLi9M9u1OXMWyXr5QNyrx5Bk+9oCBeWJWPQ=
Subject key identifier:   6E:06:7C:9A:C5:8F:F7:C1:F8:F7:B4:5A:73:FC:DC:73:F5:DD:F8:B8
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer:       /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial:       01962E2B0F117AAC1C9C7C35197288F3BDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number:          0D67
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: wZfHxM7H+MrslnxXaC0Jfjo4YReI7iwxFa+2u7in6YI=)
                          2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:11:7a:ac:1c:9c:7c:35:19:72:88:f3:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=6e067c9ac58ff7c1f8f7b45a73fcdc73f5ddf8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:cf:3e:e3:39:5a:68:a7:48:af:d6:43:12:
                    52:45:35:92:df:3f:4b:61:bb:e9:f0:ed:81:c1:ae:
                    f4:98:97:51:8c:1b:d4:15:95:87:14:b0:76:8c:e4:
                    80:b3:30:62:d2:91:6f:31:c5:82:19:dc:0f:a1:d1:
                    b1:97:e7:82:4d:19:96:c5:51:bc:2e:67:fd:03:66:
                    b5:e7:76:4a:50:57:97:c0:00:f6:be:52:c2:8b:cc:
                    e9:d1:86:36:16:89:62:b1:e6:dc:4d:72:8d:b7:33:
                    e6:5f:b8:8e:48:8b:f3:9b:b8:9c:70:49:dc:f5:a2:
                    6c:22:85:8e:e7:fe:e7:d6:e5:da:87:11:68:af:6f:
                    99:1b:96:6b:91:7e:c9:11:67:4b:3d:a3:bf:48:c3:
                    20:29:a9:30:cd:94:1a:80:0d:c2:47:ff:04:ef:47:
                    86:eb:3d:8d:63:5a:d7:0e:49:03:c9:ec:0e:1f:49:
                    2b:89:42:8a:ef:ec:3a:ec:15:f5:64:a1:57:9b:ee:
                    ea:3a:33:3b:5d:a0:b8:b8:91:ff:34:f9:9d:7f:aa:
                    87:fb:aa:23:f4:b5:49:23:06:a7:f2:0b:e7:f2:ae:
                    32:c7:a9:07:d6:8d:6c:43:c0:81:3c:30:80:52:a0:
                    66:af:9a:0a:6b:1d:2b:18:a7:92:dd:b7:a6:0b:a5:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:7C:9A:C5:8F:F7:C1:F8:F7:B4:5A:73:FC:DC:73:F5:DD:F8:B8
            X509v3 Authority Key Identifier:
                keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:11:37:ec:32:48:f1:2b:5e:48:18:9c:b3:9e:7f:45:e1:77:
         04:a9:24:c2:b3:c3:dc:df:c6:7e:cb:fb:31:e3:55:f4:af:2e:
         a2:e8:ec:e7:28:9a:8c:2c:03:44:ec:b6:9e:ed:d8:15:ca:17:
         5d:c3:0e:ff:1b:ed:68:b3:ae:17:53:a9:1c:64:62:46:cf:0c:
         34:11:43:b8:fb:e0:fd:af:8d:d0:35:00:12:94:74:5c:1d:b2:
         bf:f8:f7:fd:9d:07:5b:f8:78:6a:bc:16:85:d7:29:d1:cf:0c:
         77:8a:b1:cc:f3:79:19:2c:f7:43:4f:48:06:3a:15:f5:1c:c2:
         c0:a0:e4:54:8a:cc:7c:07:31:28:32:59:ce:b3:24:5b:c0:29:
         62:91:a1:d6:e0:ec:d0:d1:a3:c3:7d:46:95:d3:10:49:2c:67:
         dc:40:e3:ca:b0:39:e6:e5:60:11:93:63:3b:cf:df:17:4d:ea:
         6b:69:ec:13:1c:fd:62:68:19:ad:ed:f9:f2:af:4a:d7:07:0c:
         fe:a6:4f:80:c9:c2:03:b5:94:e3:8b:a2:48:15:9c:be:52:74:
         c7:8d:a1:fa:5c:96:55:a7:fb:67:37:f2:66:9f:3f:f1:24:7a:
         f4:b0:eb:fe:85:6b:ab:dd:b8:c0:b5:c1:d1:9e:dc:09:41:3d:
         05:04:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----