Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          3GZJxEnm1ANqRbmtUeIrxyS9hOf0sHQbmTTJWNTC3K4=
Subject key identifier:   1D:1A:4E:E5:21:72:DC:AB:11:CA:5D:91:51:0D:FA:DD:74:4F:22:25
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       01962F3D5575373A32AA9E4720B7BB3FF3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          0D75
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
                          2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: MDmXzG93knRwWbhG69pZvQTZS6xUcyGkpRkpsPa6RPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:55:75:37:3a:32:aa:9e:47:20:b7:bb:3f:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=1d1a4ee52172dcab11ca5d91510dfadd744f2225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:8f:12:77:f5:70:d8:f9:81:36:53:d3:91:
                    a6:c7:e4:37:b1:33:5c:ea:b8:08:61:6b:ac:2d:8b:
                    27:06:fa:bb:48:1b:22:de:e4:e0:9f:16:74:c2:f6:
                    d8:b5:ef:b4:17:ca:5c:4d:c8:4c:82:af:05:e0:a3:
                    e8:60:56:d4:66:d6:a9:76:ed:1c:20:b0:9a:ed:ed:
                    9c:0c:5c:fa:b5:6c:c4:62:fd:59:e7:c4:18:b2:e3:
                    60:12:f5:4b:64:f1:02:7c:33:73:23:5c:12:40:02:
                    d3:b0:f3:b0:89:0d:3c:66:18:3b:7f:98:e6:37:d4:
                    9f:00:84:bf:3c:92:9c:4a:fc:0c:e8:3e:86:d0:4b:
                    47:6b:37:26:65:21:02:2c:4c:00:3c:f2:80:f6:c1:
                    d2:33:91:e2:04:63:7e:6f:0a:67:0e:8a:e5:ee:0c:
                    54:ba:a4:c3:f5:69:0c:45:d5:33:41:0f:0b:bc:89:
                    14:89:a6:68:78:c7:d3:cb:27:7a:eb:43:6d:92:03:
                    da:c1:8c:44:a0:a7:1a:c8:b2:bf:84:3e:21:f8:59:
                    e0:71:28:5f:a9:a9:24:42:19:1c:2c:fd:8c:8a:95:
                    97:92:4d:b9:a5:b6:7d:d8:1d:35:ee:34:fb:50:2a:
                    99:fe:ef:b7:af:85:81:1d:6b:f7:d0:14:3b:1b:3b:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1A:4E:E5:21:72:DC:AB:11:CA:5D:91:51:0D:FA:DD:74:4F:22:25
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:f4:9f:66:8d:40:83:23:7f:b7:20:b0:de:f9:65:2f:3d:
         49:45:5d:24:e9:56:96:94:7c:d2:00:e5:0a:eb:42:22:a7:b3:
         1c:b9:c4:30:3f:8b:1a:e4:1d:bc:e1:9a:81:e7:a0:e6:ce:c1:
         79:81:13:9a:83:83:d7:9a:c5:46:1f:54:b9:fa:99:49:5f:49:
         8c:63:f5:c1:70:87:1a:38:0b:32:54:de:bf:23:a5:21:55:f2:
         8a:87:24:1c:2f:5a:d1:29:d0:b8:25:a9:b8:06:8b:a3:72:d4:
         4a:84:94:68:f5:58:c6:72:2a:98:5c:ea:64:c3:41:9e:8b:49:
         7a:41:a7:49:ab:0f:1a:d8:84:98:e3:cc:08:3c:b9:5a:12:ca:
         b9:92:5f:88:d7:0e:49:d0:75:2d:83:f8:ec:c0:3a:58:1d:98:
         4d:a8:15:47:e1:d9:02:b4:d7:2d:9e:fd:8a:24:20:f2:ca:b0:
         08:c6:dd:f3:43:f1:91:92:b2:f4:b5:88:64:ef:c5:99:ce:af:
         81:09:f5:63:1a:55:06:82:ea:58:1c:3b:64:f8:99:6b:b4:f3:
         f8:65:84:17:24:53:31:42:69:1b:f2:d1:e8:bf:fa:31:74:6d:
         db:1b:8b:25:0e:b5:8f:62:ed:56:0f:8a:a3:ce:25:e6:af:57:
         c3:1c:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----