Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File:                     1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier:          NQFDWVWpVw5s0dthfd1qtC1pDgKhULsT2+RtpAtDhyE=
Subject key identifier:   07:3F:4C:1F:D5:DB:57:B5:40:5D:0F:17:DC:0B:BF:0E:E8:ED:3D:3C
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer:       /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial:       01962F0729B4D691A4402CF5C449CF2C4062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number:          108F
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: CNe34ZSs/Qtud5rN59VUY119MMerQ1lceoPW6OD+H/4=)
                          2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
                          3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:b4:d6:91:a4:40:2c:f5:c4:49:cf:2c:40:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=073f4c1fd5db57b5405d0f17dc0bbf0ee8ed3d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:eb:ff:7f:aa:a1:2b:c3:2e:50:47:d5:bb:
                    b1:09:97:38:8b:3c:39:1d:8d:98:43:2a:dc:a5:8b:
                    c5:0c:44:69:c1:93:07:b0:0d:a0:f6:f9:82:78:66:
                    03:02:44:c9:89:3d:6b:55:68:59:5d:35:fe:40:af:
                    9c:7f:19:f8:ab:d1:72:2f:78:cd:44:d3:d4:4f:78:
                    82:e4:55:6a:6d:33:c4:01:85:e8:b2:80:3d:9b:b4:
                    a1:b5:56:57:98:3e:cd:15:d7:45:06:fd:2c:99:8d:
                    b7:13:cb:4a:35:8d:a5:ea:be:41:66:43:b8:96:0d:
                    e4:26:fd:c4:7c:51:82:32:25:74:b9:d3:90:09:36:
                    43:52:28:f4:04:d7:75:ce:d6:87:b2:ad:af:b7:3c:
                    23:86:c9:64:92:30:b9:4e:b4:b5:46:16:b2:8a:c9:
                    3d:bf:ef:f6:ff:31:ba:02:e6:a7:cb:fb:dd:1a:50:
                    46:df:cc:30:96:fb:86:59:3e:43:14:09:e8:dc:f7:
                    7a:1a:c6:27:b4:df:82:2f:8b:2c:06:79:ae:30:ac:
                    69:38:4b:03:d0:5b:aa:5d:8c:35:40:37:8c:67:3c:
                    e7:03:c4:2a:7e:b9:de:3a:de:80:8b:0e:67:a4:bb:
                    91:07:2c:a6:17:db:b8:71:af:42:a5:20:0b:02:f5:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:4C:1F:D5:DB:57:B5:40:5D:0F:17:DC:0B:BF:0E:E8:ED:3D:3C
            X509v3 Authority Key Identifier:
                keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:65:33:91:10:93:5e:e5:bc:44:38:28:56:25:06:2b:23:
         da:51:3e:0b:92:63:8e:df:23:e8:bf:52:db:14:49:92:74:0b:
         f4:1e:e2:c8:ce:21:49:82:cb:31:47:0f:67:f9:6e:c5:cf:e3:
         70:c9:98:12:d0:c7:f3:d1:eb:98:cd:2d:96:39:8e:94:93:d0:
         6c:d3:3b:c0:96:a6:2d:31:76:12:c8:77:f9:02:6c:ab:8f:60:
         17:68:8e:59:e1:cf:34:d6:73:63:2b:b7:6c:77:32:b6:3f:11:
         a4:57:4c:82:df:1a:e5:fb:83:a5:90:b5:73:77:4b:45:7d:3e:
         1b:66:0e:fe:af:0d:60:ac:53:99:69:8e:e8:bf:2a:e8:5a:94:
         06:44:e6:a4:8f:16:9e:13:54:f5:97:77:d3:43:9c:c7:84:57:
         49:5a:59:b3:4f:e9:cd:d7:86:f8:62:0c:45:a0:ba:05:36:7e:
         13:b6:85:79:0b:8e:e6:cb:06:e7:47:8d:62:5c:af:d9:66:0b:
         d9:7c:2f:42:c2:7f:6c:48:42:5e:ee:1b:51:20:58:df:6c:c4:
         21:e2:79:88:77:d0:fa:b5:0b:1d:1c:f3:41:4c:b1:61:59:0a:
         26:ca:ee:ec:4d:45:7d:fe:d3:bb:34:64:74:bd:ac:ff:94:b1:
         39:86:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----