Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File:                     Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier:          rx8xueXqKXFfy0Jrjmu9+h1lRMF4r/v8AgEpMq2TxI4=
Subject key identifier:   FA:48:10:02:73:80:7F:35:E1:0F:E5:A1:77:34:80:CE:56:8F:FC:17
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer:       /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial:       01962E2B353DD3BD0BD3E204D0A48DF2617B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: LcVV+Qwt8jdEATQp3FvZbtEqGxBkTLm1gwT78uyZh/0=)
                          2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
                          3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:35:3d:d3:bd:0b:d3:e2:04:d0:a4:8d:f2:61:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=fa48100273807f35e10fe5a1773480ce568ffc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:a7:d7:d5:d3:8c:25:07:c5:66:57:c0:5c:
                    7a:f0:2d:da:c5:0c:7f:45:96:b6:07:35:c9:85:21:
                    63:4a:af:2d:ad:24:aa:b1:79:c9:03:00:3b:c4:9a:
                    15:4a:10:c8:ce:e0:b6:bb:1f:4a:49:3d:8f:92:77:
                    dc:76:50:82:1e:9c:db:ed:7a:1e:a7:19:ec:66:0f:
                    92:ef:51:fe:97:d4:1f:94:2b:e9:a9:01:ff:df:2e:
                    02:73:c5:cf:88:51:b7:c6:75:84:cb:32:61:ee:1e:
                    c4:d1:b6:73:2e:66:4f:af:60:f8:ff:7a:45:fe:92:
                    ac:ae:0a:37:6b:db:22:66:28:e9:d4:b1:d2:7f:52:
                    ff:82:38:97:a6:44:59:4d:7b:0b:f8:d2:44:71:fc:
                    47:56:08:5e:8b:41:25:00:f4:6c:17:d9:93:03:41:
                    ef:79:01:13:7c:14:b1:f6:da:cf:2e:da:51:4a:af:
                    dc:b1:c4:ac:7e:14:bc:65:d6:85:d3:8d:38:ca:af:
                    bd:94:5c:3d:a2:81:91:c7:b3:19:01:14:92:7a:d5:
                    b8:66:7f:79:80:3c:86:4f:63:1b:7f:37:6f:82:70:
                    ad:a1:80:60:35:51:1e:a4:4e:85:b5:68:c3:37:31:
                    93:d8:d2:4b:c7:81:67:68:7f:78:d5:c4:a1:e3:ef:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:48:10:02:73:80:7F:35:E1:0F:E5:A1:77:34:80:CE:56:8F:FC:17
            X509v3 Authority Key Identifier:
                keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:42:1d:b7:c5:00:45:75:2d:83:30:69:10:c5:34:0a:ee:
         fb:a2:dd:29:d4:a1:89:01:6f:ee:4f:7c:ad:b4:22:f6:a7:1f:
         d1:c4:6e:31:78:ae:d9:ff:4f:df:c2:af:80:8c:b0:23:bc:20:
         25:04:77:58:88:3b:c2:c4:82:fd:55:ed:20:d9:1a:43:a5:ac:
         65:3b:38:67:ee:64:0f:5a:b2:e6:3f:d6:f8:b0:63:bf:89:8d:
         ef:11:ef:d5:88:32:43:38:b7:b3:20:72:17:73:7f:98:69:a9:
         7d:7e:3e:12:f1:cd:97:d9:28:87:b4:d5:97:6c:cd:45:66:5a:
         39:40:07:94:b3:4b:f0:7b:ee:c6:1b:d2:80:a7:c8:d2:f4:46:
         f9:0a:4c:a6:69:d0:07:d0:bb:8e:1b:2b:c4:a5:a7:f1:60:b4:
         1c:08:b9:c1:bf:ca:fd:99:ed:d9:8e:2f:1f:04:0b:85:7b:49:
         f2:e5:67:da:a2:99:d1:c1:84:f0:32:05:70:99:9a:c9:dd:ed:
         37:70:5d:70:12:c6:ee:87:05:94:75:d7:fc:36:d8:ef:76:76:
         d4:d5:64:c9:4c:ec:47:a9:3a:0b:29:c9:82:89:26:b5:0f:91:
         43:6b:36:95:b3:df:88:0e:6e:d4:30:c7:60:f1:73:a9:77:9a:
         fd:33:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----