Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File:                     DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier:          CAA5AP5aOvYUyzBFbEXTE0dUld2k4XnwWL3g6PH4Z3A=
Subject key identifier:   AC:FA:F3:BE:E3:5B:E5:80:43:2B:8A:9D:FE:C5:1D:1D:BD:36:B7:8C
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer:       /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial:       01962F74951AD721AC68F01561F1D512AC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: +0aQwWY/0rQxl79/tryf0+BIjY8pqWjTja7IssL/S5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:1a:d7:21:ac:68:f0:15:61:f1:d5:12:ac:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=acfaf3bee35be580432b8a9dfec51d1dbd36b78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:1f:43:9c:0d:8c:90:90:4e:6a:f6:cd:48:
                    c4:d4:ee:21:1c:60:b7:d6:ad:d2:aa:da:70:ba:9d:
                    c2:d8:c2:cd:76:97:b9:5a:22:c7:d4:b0:2f:bf:85:
                    5a:1d:c8:b9:9a:44:4d:c8:69:e6:f2:f2:d5:3e:71:
                    db:38:88:75:ba:98:7d:5e:3d:29:19:e8:25:a4:a1:
                    77:8a:c9:e9:0b:3a:9e:84:aa:4a:ad:be:86:56:e4:
                    33:22:c9:7f:99:92:e4:77:d4:cf:51:81:63:45:94:
                    cf:20:9b:21:2e:a4:7c:32:08:21:0b:6a:cb:0f:d5:
                    d3:82:8c:6a:e2:c4:e3:52:db:a7:16:f5:e7:8b:40:
                    8d:c8:4c:ba:c0:72:0c:d1:69:4b:6d:40:ef:90:2d:
                    f0:f4:84:49:da:be:ba:ea:07:cd:59:af:2e:c9:28:
                    e6:e1:25:43:e4:ee:99:1b:f1:74:ef:04:e5:bd:25:
                    81:98:2d:1f:a2:68:18:f7:47:f6:03:53:62:ad:df:
                    5b:bf:ce:3d:38:09:29:75:66:12:3d:67:94:cf:23:
                    35:e7:6c:fe:66:1b:f0:a5:fc:25:dc:00:ea:f6:fb:
                    5d:2a:f3:69:be:fc:bc:96:df:ff:67:0b:04:79:b1:
                    5c:2b:5b:e5:1a:77:f0:f1:78:3b:4a:6d:3b:60:f6:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FA:F3:BE:E3:5B:E5:80:43:2B:8A:9D:FE:C5:1D:1D:BD:36:B7:8C
            X509v3 Authority Key Identifier:
                keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:84:35:6a:b7:9a:07:c7:c6:54:c6:fb:0d:20:7e:a0:a7:b9:
         45:56:5c:77:ec:00:ff:94:ac:f8:15:49:1b:e4:38:d9:10:06:
         3a:90:39:72:f8:24:72:ce:23:96:31:c8:ee:f0:db:9d:93:f1:
         a2:f9:3a:4f:07:68:ed:8b:e0:ed:a3:28:34:ce:4c:2f:96:73:
         f0:39:d2:54:cf:fd:82:23:81:d6:28:8c:24:8b:65:db:fa:40:
         b2:90:05:2b:59:12:42:26:0a:07:02:a5:c5:d2:60:39:97:97:
         00:4a:9b:e6:ac:c6:85:c2:e5:2d:56:e1:40:72:8a:65:a2:6d:
         5b:bd:95:1c:bb:ac:a4:09:65:a4:05:93:c1:3a:f7:e5:58:a5:
         70:7b:3b:87:b4:4b:43:21:f9:16:c1:a4:99:4d:83:a4:33:46:
         cc:75:19:05:c2:3b:7d:61:70:15:e3:a3:cf:a6:fe:21:5c:61:
         ea:69:88:c0:43:03:e5:31:7d:8c:7d:24:09:f7:5b:12:e0:f0:
         9e:88:8a:ec:aa:c4:75:93:b3:33:41:b9:30:87:bc:0e:20:70:
         40:8a:c8:83:60:ca:ce:04:4e:ff:bf:44:46:58:5a:f8:76:d0:
         cb:d6:67:51:39:16:58:02:15:79:e3:8b:e7:90:36:bf:23:5a:
         27:77:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----