Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
File:                     wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft (raw, json)
Hash identifier:          dRzj9tojCOxQVls3ObUi4Ao5JNlgyevHTJ9bayKp6V8=
Subject key identifier:   DD:22:1A:6A:82:46:21:30:9D:F4:7E:2E:17:D6:C9:B5:CB:94:06:0D
Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
Certificate issuer:       /CN=c037958083b641b773123ceada7bef27558e5940
Certificate serial:       01962F3D670C8BA5E1681183012FC05F8FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: G04lQHkrBdpuXzaWHZ8TU8JabhU.roa (hash: Pf3n2aY4cgJyph0KOBPCn/jMgorMxrNstlYjIBjVB/Q=)
                          2: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl (hash: oBxJ9lcO7Xdv0qWpEOaCEJ31efBz1Z/NY7rRJZtMME4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:67:0c:8b:a5:e1:68:11:83:01:2f:c0:5f:8f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c037958083b641b773123ceada7bef27558e5940
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=dd221a6a824621309df47e2e17d6c9b5cb94060d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:c6:41:15:cc:b1:cb:5b:fb:34:91:74:98:
                    77:75:ad:21:5d:ff:0e:a9:e4:06:93:ac:59:23:0c:
                    bf:88:76:b1:e1:60:32:69:7d:40:6f:56:38:48:16:
                    dd:56:57:fe:f0:89:de:ee:49:97:40:95:f6:38:9b:
                    3f:bf:2c:66:0f:f5:99:c4:cc:4a:c2:ff:42:c9:53:
                    df:66:48:8b:c1:40:65:28:68:7d:0e:45:01:80:87:
                    32:5a:f2:e5:50:8a:5a:98:14:6f:37:8a:9c:07:77:
                    3c:1e:8f:ed:77:79:f0:ce:19:37:bf:02:67:a5:80:
                    5f:e7:9e:05:15:f4:77:2f:62:0e:cf:cf:d3:50:90:
                    06:33:ce:4b:a5:f0:a6:ed:a7:e8:06:66:3c:f2:71:
                    08:e4:82:d8:6d:a2:32:e9:a2:3a:6d:61:17:ec:02:
                    9a:98:dd:d8:40:1d:49:26:7a:8a:0f:27:cb:5a:30:
                    8d:38:64:0b:0d:d0:cf:64:3c:8f:6b:14:12:26:e7:
                    aa:6d:24:5c:5d:ee:fb:8f:e1:d4:11:30:44:b1:3c:
                    16:4f:92:51:6b:a3:81:03:16:aa:7f:c5:63:56:e2:
                    19:6d:c2:1a:83:bc:f1:a7:e9:6c:5e:a3:f1:5f:bc:
                    cc:fb:5f:b0:7d:2b:31:e1:47:5e:7a:26:19:62:15:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:1A:6A:82:46:21:30:9D:F4:7E:2E:17:D6:C9:B5:CB:94:06:0D
            X509v3 Authority Key Identifier:
                keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:be:a5:95:aa:96:90:4e:5e:36:1f:52:07:9f:d8:a8:4e:
         ab:35:2d:9e:ba:32:c8:20:bb:87:74:8c:31:3c:ef:ff:13:80:
         fd:be:9e:08:6a:20:be:84:d5:0e:ee:99:b5:9d:ad:04:00:06:
         dc:28:96:87:e1:d5:9e:78:43:26:5e:7e:90:e9:ed:29:a6:60:
         1c:84:3d:50:f2:99:d9:d7:95:5a:e0:59:91:6c:33:ba:69:a9:
         5a:4f:5a:9a:46:e8:9f:63:89:1c:d4:11:0c:bf:75:f6:11:3a:
         90:e7:5c:85:b4:4b:a7:6a:ae:26:97:35:dd:74:7f:f9:d4:52:
         87:b0:97:4e:60:e3:7d:6e:dc:d4:29:80:cb:1a:72:4c:24:74:
         0a:ab:d0:d0:cc:26:ac:fe:4f:0f:cf:78:c1:26:0d:8d:29:df:
         99:68:38:ab:f2:1a:92:74:13:c0:d1:3d:0e:05:49:c2:28:b3:
         cd:3d:93:3e:6e:ca:e1:62:52:e7:5b:16:b7:ad:21:64:69:47:
         80:f3:92:d4:17:0a:8e:1f:32:b2:48:c4:68:02:5c:ed:84:6a:
         70:85:19:e7:56:38:79:4e:8d:96:6c:aa:fc:04:f0:e2:be:8a:
         4b:83:a6:15:9b:11:4a:ce:25:e8:50:05:23:26:bf:a0:7e:36:
         41:35:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----