Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          3TrTVktl6a90ndz7mp2h7R59hxpAwtrKEonwGDyVuw0=
Subject key identifier:   58:E3:34:18:57:3D:00:FF:4C:02:12:CF:64:B8:DC:6A:B5:99:A8:5F
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       01962F7472C16C994133417652A8E155C661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          0449
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: FApXj1UysEk9qxiSs+Mjpf1I1zxKiEzpc54DvwPmiQk=)
                          2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:72:c1:6c:99:41:33:41:76:52:a8:e1:55:c6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=58e33418573d00ff4c0212cf64b8dc6ab599a85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:c1:08:b1:46:1c:f2:68:18:6f:1b:18:0a:
                    9a:05:f9:c2:ae:05:af:ac:a6:01:e5:5a:b4:5f:e0:
                    f8:0c:c8:30:9f:74:e6:ee:1a:d3:a1:25:d8:8b:50:
                    4d:9c:39:3e:76:06:6b:15:39:e5:d9:aa:30:fb:ab:
                    6e:db:bb:d1:e6:4e:7a:5a:f3:27:14:33:1d:38:76:
                    38:db:7e:e7:1c:24:12:4b:b6:d9:44:e9:33:f5:cc:
                    5e:6a:ef:8c:35:9c:12:f9:8b:79:0c:17:ce:61:74:
                    32:3e:95:52:17:1b:6b:94:a3:99:71:52:9b:c6:13:
                    06:4c:76:6e:54:01:67:e3:02:35:9a:28:e2:fa:b4:
                    af:a5:b2:b5:a0:f2:b5:52:fa:36:bc:1e:b1:0d:51:
                    f4:e6:d6:0b:a2:18:37:f9:0a:ea:7c:65:e4:ca:e3:
                    0c:1c:1b:82:bb:29:74:f8:58:cf:bd:d9:77:35:19:
                    d4:0e:fd:1d:e1:dc:93:4c:72:8e:80:c6:85:47:6d:
                    5e:c4:91:83:4f:c4:18:ff:cf:aa:68:4d:32:f3:ec:
                    f8:3c:5a:f7:68:c1:bd:49:9e:39:1a:24:ef:c3:2a:
                    b3:4c:f4:8d:a6:4c:14:f6:e8:22:05:25:8f:d8:a7:
                    0e:0f:a2:b0:d1:a0:71:3a:7b:67:5d:db:64:3f:15:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E3:34:18:57:3D:00:FF:4C:02:12:CF:64:B8:DC:6A:B5:99:A8:5F
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:df:4c:a2:e0:4a:7d:fb:46:ce:94:e6:3e:31:ae:6a:d2:e4:
         6b:72:5a:9e:b3:42:25:a6:44:51:48:c5:94:2b:8d:ee:6e:80:
         7f:2d:4a:ee:8a:93:b3:9a:9a:71:f5:d5:1c:43:d7:55:fd:d6:
         28:ee:e5:c1:02:66:dc:7b:ed:13:57:a6:a1:1d:fc:c7:80:79:
         07:06:71:2d:7c:2d:77:b4:60:81:5a:fa:1d:c0:49:cf:e7:5d:
         2f:2b:04:2c:e9:82:80:2e:62:d4:65:ae:6d:18:ae:01:d2:21:
         8f:7e:10:eb:a0:46:e1:aa:39:6c:d3:f5:d5:0d:2d:15:6e:23:
         e7:f0:3a:60:45:a2:08:21:11:9e:f6:71:40:e2:cd:d2:d4:2c:
         62:7e:64:76:08:48:1d:41:5f:63:07:88:af:44:69:8c:3d:6f:
         72:5f:6d:e0:75:c7:04:6e:5a:42:18:54:49:c8:61:7b:e2:69:
         f1:89:40:31:3b:39:43:69:34:97:2e:e7:a8:62:44:60:26:9e:
         07:a3:c9:be:47:b0:f9:7c:dd:16:a0:64:12:1c:1a:0d:ae:ab:
         53:9c:04:77:80:81:a8:6c:f7:00:71:9e:32:79:0d:70:14:95:
         32:0b:79:04:f5:12:2a:ca:72:79:bb:52:0f:39:4a:27:c3:f1:
         da:5b:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----