Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File:                     DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier:          /cOgyrjlTzKRSbNSqDNp33agu3sol8618h0e4ZyCJw0=
Subject key identifier:   B3:5A:ED:55:7B:72:5A:5C:B5:30:50:2C:AF:CB:47:48:97:E9:26:F5
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer:       /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial:       01962E6184A6ACCA01B4BD4A548963657827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number:          0DAA
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: +os/pWgt0Qe/VUAbvvRWIyaX4QWPYdqyJxWoFbWYRtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:a6:ac:ca:01:b4:bd:4a:54:89:63:65:78:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=b35aed557b725a5cb530502cafcb474897e926f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:aa:ab:f5:d8:6d:de:bb:17:be:8e:84:cc:
                    52:cc:ef:df:7c:b2:4e:e2:7c:b2:db:3d:96:89:14:
                    f5:8e:56:c1:89:ee:b5:e0:51:0f:65:80:0b:0f:d9:
                    15:c4:b6:45:fa:27:3d:c1:9f:8d:93:e7:34:d5:d7:
                    c6:ba:04:5e:6d:24:67:05:68:dc:2c:55:20:b9:c5:
                    81:1e:f3:6e:19:91:b2:86:2e:c9:78:07:d0:c8:35:
                    16:39:61:3b:f7:1d:f1:c6:20:c9:01:f3:66:88:9b:
                    b6:12:85:30:77:ad:da:4a:08:c5:62:50:71:d2:52:
                    53:79:ac:f3:d3:2e:6a:06:42:5b:a2:66:92:53:03:
                    40:e5:54:cd:4a:84:ba:b3:47:3e:dc:6e:81:fd:ec:
                    cb:3f:ff:ca:6f:af:ef:70:fe:95:92:41:fc:a2:33:
                    21:f9:b0:0e:b8:18:16:8d:7c:4d:18:d3:10:f5:9c:
                    d3:38:03:84:78:3d:25:7e:af:35:21:a4:68:08:e5:
                    4a:82:e9:18:96:56:53:52:ad:78:c5:e1:df:c3:c9:
                    8d:f7:af:f3:cc:68:8c:11:b0:06:e4:96:c7:51:67:
                    90:7d:d5:a2:45:fd:4e:c9:7a:8f:13:55:42:f3:ae:
                    17:20:c7:2f:c9:3c:5c:1b:d7:70:b5:be:97:c6:3b:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:ED:55:7B:72:5A:5C:B5:30:50:2C:AF:CB:47:48:97:E9:26:F5
            X509v3 Authority Key Identifier:
                keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:31:43:a7:8f:af:be:00:30:fa:06:73:9a:d5:13:24:39:18:
         2b:02:43:63:65:f0:45:7a:4b:88:05:b7:34:9b:31:42:da:e8:
         cb:99:31:6d:8c:d7:79:1e:13:52:19:f6:8a:ee:61:5a:46:93:
         91:c8:e6:6a:71:9c:5e:ff:be:20:8f:54:14:e5:67:4e:3d:ee:
         93:a5:c4:b8:76:06:0e:0e:60:97:da:5a:e3:ae:5c:db:9d:4d:
         7e:43:aa:a2:db:54:4b:61:d5:87:bc:d8:bf:22:c6:37:a5:00:
         cc:be:c3:1a:07:e3:5a:7c:a8:cc:fc:bf:3e:1c:bd:84:07:bf:
         10:9e:44:a7:47:e4:75:5c:c0:78:c1:b1:23:e4:eb:bf:2a:b7:
         07:24:0c:04:7f:f4:c3:6e:69:9b:61:9e:76:8d:0c:16:e7:4e:
         e8:67:09:55:a3:8f:a1:91:99:a8:6a:a5:83:99:05:13:c2:4f:
         12:14:3e:29:c0:df:01:5d:d8:40:44:69:b0:f8:24:45:55:cd:
         bd:7b:64:77:a8:a8:12:58:f4:8c:5e:0c:34:e6:d4:93:a2:47:
         9b:60:64:25:b7:25:14:ee:b0:6d:7b:72:0a:86:a1:14:0d:96:
         10:35:bd:2e:93:a5:c4:07:d6:d9:5a:85:63:c0:c5:6f:35:61:
         23:21:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----