Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          EVuQ4uBNeF5PfenDEJhfBQSxQvWmeooUQ7x+o0fVpgQ=
Subject key identifier:   1C:7E:5A:4C:9A:CE:B9:43:74:C6:E3:D8:30:C0:F3:94:56:83:26:21
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       01962E2B06FAB616341CD1A5A7165FB38D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
                          2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
                          3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
                          4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: wD0/uBHg5q1ofKamKj6bFqRDa58GExCLDaFw4J/tCNQ=)
                          6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:06:fa:b6:16:34:1c:d1:a5:a7:16:5f:b3:8d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=1c7e5a4c9aceb94374c6e3d830c0f39456832621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:e7:d3:7d:ac:11:cf:07:4a:34:55:75:6e:
                    d7:23:af:45:b2:89:84:d5:f0:3e:63:01:f8:3f:5d:
                    d5:37:ee:b5:15:fa:20:3c:16:24:b8:96:68:b5:87:
                    a0:f9:93:44:a9:32:7b:e7:aa:81:b7:5e:bb:cd:c3:
                    c9:b0:9e:c6:17:4f:ad:2d:b6:57:ad:1c:70:61:b1:
                    1e:b8:aa:8f:3d:0c:1c:b1:b3:b7:45:25:69:66:75:
                    c7:0f:01:66:03:06:69:e4:dc:f7:bf:75:86:10:24:
                    c0:5b:4d:d0:05:97:42:f3:b4:cf:82:6f:81:a7:43:
                    92:c2:44:0e:b5:6f:c6:63:30:7a:cc:0f:d2:d9:2e:
                    ee:c2:95:1a:d7:d1:b6:9e:2f:e3:08:2b:51:ff:88:
                    4c:61:f4:bb:ed:12:21:95:83:dd:3c:fe:df:e6:0b:
                    1f:b0:74:24:0a:20:72:cc:b0:ca:3b:41:8f:ac:c1:
                    2f:19:2f:a0:7a:58:cb:5a:53:0d:ca:b5:f3:f8:7e:
                    7d:a7:f4:95:18:64:b0:5f:7c:77:bf:cd:af:c4:33:
                    3a:75:88:d2:2c:1d:01:e2:1c:45:38:0e:01:b3:31:
                    64:ab:b3:b4:dd:f9:7d:39:97:7a:2b:14:6b:3c:6f:
                    53:fd:ac:a1:93:f6:bf:fa:a8:3d:dc:3a:89:d4:1a:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:5A:4C:9A:CE:B9:43:74:C6:E3:D8:30:C0:F3:94:56:83:26:21
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:c5:d0:0c:5a:c3:e1:56:0e:3f:37:0f:a0:a9:48:87:dc:
         66:7e:b9:ea:ac:3f:a2:04:93:e5:b7:09:5c:c1:d2:84:6e:b7:
         0b:12:06:8f:ea:b4:92:65:95:bf:d4:ad:e7:6b:c8:36:67:04:
         51:6e:ad:58:d2:66:36:aa:ad:2f:8b:b9:be:a3:68:76:d6:d2:
         b4:07:77:9c:66:f2:05:3d:9c:16:19:c1:ab:13:91:b0:e6:41:
         ca:cc:ae:cb:8e:3e:9b:c5:a3:13:7c:fc:cb:f1:fa:ec:a4:4f:
         c8:99:18:51:5a:18:6c:de:81:cd:03:a0:a6:85:0c:d4:d8:90:
         97:7b:fb:61:fc:4e:b7:00:04:d6:02:85:84:97:0d:ba:72:1c:
         f8:95:a7:8d:a6:58:6c:b4:6e:65:c6:6e:e1:23:57:ff:2a:94:
         e2:30:60:48:b7:ec:8e:50:80:b4:df:91:5f:21:57:54:ff:63:
         dc:be:71:10:ac:41:15:b1:f1:c8:51:1d:8a:40:40:1c:3a:a7:
         9b:83:3d:d2:f7:f9:32:e8:6c:11:7e:38:77:44:04:d3:48:b2:
         c4:e7:3d:ae:81:2d:72:78:5a:ea:df:cd:61:6b:e2:63:2e:d1:
         76:19:b0:9f:36:c1:59:a8:42:5f:12:35:7c:88:01:c4:68:ce:
         b3:45:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----