Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
File:                     IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft (raw, json)
Hash identifier:          CUJqS3LYCIcruYyRx7O6PJXbjsUvVG7iZzqMYu6kk1M=
Subject key identifier:   A3:E1:D7:74:C2:0F:55:9C:2A:BB:07:9B:9E:39:17:57:88:96:3E:5C
Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
Certificate issuer:       /CN=229a038176c796ea4f2769f6be3cace1a3597634
Certificate serial:       01962FAB07E1780F2C9ACFE70E9C15695AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: Hix749q65sYikumyIiO2w3pF6Ac.roa (hash: N0R4AArriY/KzHOEs+CuI34MlSMnkBHaO9k0W7jdIBQ=)
                          2: IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl (hash: DyHeYw2sHy30GOIQeD5reEvL0eVnfwCvNoS0n4Y+ESs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:07:e1:78:0f:2c:9a:cf:e7:0e:9c:15:69:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=a3e1d774c20f559c2abb079b9e39175788963e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:c2:6a:c4:a9:e9:2b:81:59:05:99:00:b0:
                    c9:b3:48:92:9f:34:75:a4:7b:85:e3:dd:fa:d7:50:
                    b5:f9:cf:12:85:99:63:a6:29:11:ae:e9:ed:4d:02:
                    a8:26:8f:fd:e7:c6:9d:ff:6b:a8:1f:62:fe:df:16:
                    de:de:7b:1c:1b:fb:33:d1:19:b3:10:02:dc:7e:0b:
                    5e:08:77:45:fd:c2:99:c6:3a:48:86:9d:74:25:f1:
                    ed:74:70:8c:ba:b6:6c:d8:e0:c3:b8:26:01:17:38:
                    23:00:5a:81:5a:06:7b:ed:8a:35:11:6f:3a:94:91:
                    1b:94:58:d7:d1:ac:39:70:83:a2:d1:d7:51:6e:75:
                    76:bc:7c:b5:9f:d9:b0:2e:ad:7a:22:b6:a1:a0:db:
                    3e:9b:ec:f3:5a:fe:a0:58:a4:4e:04:d2:8f:cd:44:
                    14:db:2e:11:16:8a:e9:e8:ed:1d:a9:af:12:65:08:
                    0c:68:bf:0d:cf:31:c6:82:72:2d:6f:51:f8:f3:a0:
                    79:55:b2:8a:e7:d0:79:cd:68:9a:5e:fc:4e:fa:57:
                    17:72:88:eb:7e:ad:60:d9:8c:6c:26:78:4a:60:a3:
                    da:d9:74:c5:c0:ef:cd:cd:60:3a:5b:1c:1f:08:27:
                    11:e3:38:ee:13:1f:e4:7f:31:3a:1f:09:f7:12:42:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E1:D7:74:C2:0F:55:9C:2A:BB:07:9B:9E:39:17:57:88:96:3E:5C
            X509v3 Authority Key Identifier:
                keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:86:67:e9:7c:24:93:b7:4e:1a:9f:a8:36:42:7d:09:ff:0d:
         45:bf:ac:05:a7:7b:be:66:96:ef:1f:2a:87:bf:bf:7f:b8:47:
         d0:c6:89:49:06:60:9f:2c:41:6c:a9:b1:c1:c7:11:b2:f6:7d:
         8b:a6:85:1a:ab:e5:c0:1f:c5:23:ba:e2:9f:41:a9:ba:90:3f:
         0c:0b:f9:77:69:a2:13:e7:99:ae:0d:44:97:59:03:67:c9:66:
         6e:29:25:1b:77:9a:12:e6:05:5c:75:6b:3a:d1:c9:eb:1a:44:
         53:df:d4:ca:51:06:fe:86:2d:f1:3d:f5:94:5a:b4:a2:3f:39:
         c1:73:44:dc:0b:4b:f1:b1:1f:9c:e2:09:0d:2e:4e:7d:a9:7c:
         97:e1:67:08:f6:09:f8:24:50:63:23:90:7c:39:f2:10:03:3b:
         f2:59:2a:75:a8:be:ad:a4:c5:9c:b7:03:86:79:55:94:b6:38:
         1a:97:58:74:8c:24:b5:b8:a0:8e:54:7b:b2:ec:ca:49:2c:56:
         2f:5b:8c:09:e7:81:f7:b7:bb:4c:06:b3:3b:42:55:52:0d:0d:
         4e:72:f6:c5:6e:4e:5e:a8:ef:48:ac:20:f5:22:f5:7b:10:9b:
         08:12:93:58:e8:2b:cb:d1:5e:6f:dc:13:c2:ee:32:90:32:9a:
         9d:9f:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----