Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
File:                     0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft (raw, json)
Hash identifier:          F084T5hHP2X9n9NswDDT7H8rPHSJH6K3oJQ43q7ij5g=
Subject key identifier:   A7:59:D6:52:D3:D0:BB:05:E1:0B:48:A9:DB:1F:DF:AF:4A:65:D2:7F
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Certificate issuer:       /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial:       01962F3D2E189921DDADFE1ECEC6258AAEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
Manifest number:          146A
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl (hash: Opu5a+u14DZKsXceuxyE8J9tIni0udLe1Pf3SI09jI8=)
                          2: 8YEIarEZx-dYy-m-KWzFFJwMPgc.roa (hash: /Oh4KoguX/e5aBAHRSFC+nV1NgF/Rk6lBFfGk9GKTMI=)
                          3: aSUDb8sQcFUdmzbKm4gdVmu_3-w.roa (hash: 8GJtsZCv+fojGQVCn6tX0KvBg6L31AUzVNGq91VjeYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:18:99:21:dd:ad:fe:1e:ce:c6:25:8a:ae:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=a759d652d3d0bb05e10b48a9db1fdfaf4a65d27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:f0:d8:11:bd:51:b2:da:8a:d5:13:2b:3e:
                    7c:2b:25:bb:b4:fb:fe:a3:d6:f7:33:d6:58:b5:4f:
                    56:2e:5b:51:a9:f5:f7:a6:65:56:83:ac:77:37:5b:
                    c4:87:00:9b:ee:cc:ed:78:5f:30:62:1b:ed:a7:23:
                    9e:3f:44:5c:43:46:c8:84:83:f1:da:bf:8f:64:7b:
                    76:b5:af:6b:18:3e:d3:b7:71:d3:84:69:57:e3:8a:
                    ba:ef:10:be:a2:0b:9b:86:7c:25:cf:5a:98:7b:a8:
                    c0:22:6d:1f:5d:dc:4b:7e:f7:0f:40:8e:45:e6:29:
                    5c:df:df:3f:0b:34:b3:d2:58:ef:a1:03:06:97:70:
                    e3:18:4d:4d:31:42:a0:5b:13:d5:49:51:da:f9:ef:
                    84:9d:3c:4f:e7:59:43:7c:c3:d6:bd:e6:ef:4a:9f:
                    4f:4f:b2:1e:3a:10:4a:53:d2:4a:5b:a8:c4:5d:e5:
                    05:35:bc:37:ce:54:41:45:3a:b3:11:71:fa:b7:43:
                    f4:63:f7:74:67:61:4b:d0:f6:85:23:07:fe:de:82:
                    30:8a:6f:27:a7:2a:9a:bf:f5:38:07:72:35:62:43:
                    e9:b6:0b:a0:e2:7f:ce:7b:51:64:2e:e0:ad:1d:0f:
                    fd:e2:6a:c7:d4:5d:7f:a7:bb:92:62:70:f3:15:55:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:D6:52:D3:D0:BB:05:E1:0B:48:A9:DB:1F:DF:AF:4A:65:D2:7F
            X509v3 Authority Key Identifier:
                keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:98:79:48:e5:92:93:9c:04:36:54:1c:18:c5:15:37:67:
         00:09:4e:2c:0c:b4:4c:48:c1:c2:2a:86:20:67:69:29:0e:f6:
         7e:bd:ef:f6:8f:e1:82:46:38:5c:97:ae:e2:e2:ba:f5:5c:4b:
         8a:0e:ad:a9:b4:9c:49:11:6d:b9:41:cc:30:a0:fe:41:b5:5d:
         4f:9f:58:41:1f:36:fa:c9:d7:bd:15:f8:fc:65:9f:c2:22:42:
         6a:3f:f5:9d:38:62:f7:80:16:47:d3:bf:c1:f6:ed:4c:d5:00:
         a5:94:6b:26:95:39:11:2b:c9:3a:87:bc:47:1c:87:a6:69:27:
         5f:cc:81:bc:16:d9:b6:39:29:36:ba:4b:88:51:7f:92:39:d4:
         9f:cd:2b:22:5b:88:e6:11:04:b1:95:33:63:19:78:92:a4:23:
         ba:67:67:ea:39:70:fe:d4:b4:51:f0:3d:34:ea:b8:49:8f:a9:
         c5:a9:ee:33:8b:49:2f:55:ce:c4:f8:17:5b:e3:e0:65:a0:84:
         a7:97:9c:14:db:fb:4d:71:15:8d:ad:34:24:26:af:bd:67:e8:
         b3:9f:ab:94:cb:23:d7:2b:7a:cd:1e:b5:87:5e:e7:a1:d1:02:
         58:e2:ae:7a:29:a9:38:0d:78:63:1c:e3:0e:a7:f8:99:a4:55:
         cd:1a:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----