Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File:                     dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier:          nz2oPqV5cRtidU9PMiKjSavUH600TAuk0kZlMBu6fYE=
Subject key identifier:   E1:18:7C:AC:C1:5A:24:78:15:A1:DF:BD:E3:FB:44:22:57:65:62:7D
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer:       /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial:       01962E9946E9B53D0F4F1B60C39D4278B9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number:          0D51
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: iHzkX3LVxmJslhNVihjF1sfe+j9/5QLDpC2XsCfqC1s=)
                          2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=)
                          3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:e9:b5:3d:0f:4f:1b:60:c3:9d:42:78:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=e1187cacc15a247815a1dfbde3fb44225765627d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:a1:71:b5:67:8f:3a:b9:fa:a5:53:5e:88:
                    67:5d:0e:ad:ef:cf:49:f2:ea:bb:ac:38:c5:88:0e:
                    f9:14:46:e6:07:84:a9:88:8b:10:62:6f:80:a1:8a:
                    2d:0d:da:cb:cc:78:16:a4:8c:7f:19:f8:69:ac:69:
                    e5:23:a5:a3:ba:b6:6e:22:24:23:0b:53:61:82:25:
                    92:63:09:f7:8f:fb:8c:55:3c:01:18:9a:12:7e:3c:
                    02:c3:42:9b:ae:d5:cb:6b:9e:31:e2:49:3b:0e:b7:
                    58:90:9c:20:e4:1c:86:20:71:26:1f:8c:96:c8:89:
                    17:7c:1e:76:2b:98:04:ab:56:c4:a6:6c:2a:1c:0b:
                    89:ac:ff:97:29:63:02:0b:42:b1:ab:aa:19:41:5e:
                    6e:a6:2a:c9:67:83:47:0f:13:9d:55:6f:4b:ae:60:
                    80:1d:4e:01:b6:fc:c2:81:be:4c:b4:21:98:5a:93:
                    92:55:2c:44:5a:37:87:b0:97:90:fa:f1:b8:7a:ce:
                    72:52:b1:d8:38:b1:0a:bd:46:f7:d5:36:05:6c:ed:
                    7d:cb:49:11:81:41:84:6c:42:e0:7e:67:f8:36:bb:
                    32:4d:3c:db:a1:b3:88:f0:62:a8:64:cc:e4:e8:04:
                    9e:38:27:c5:58:c1:1b:c6:f8:df:38:66:3e:1e:91:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:18:7C:AC:C1:5A:24:78:15:A1:DF:BD:E3:FB:44:22:57:65:62:7D
            X509v3 Authority Key Identifier:
                keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:da:d6:45:d6:a6:b3:db:5b:8b:cd:d1:cb:04:86:e2:2c:
         1e:e1:1b:4f:55:b9:95:2e:e9:c9:1d:fd:25:42:e4:db:7a:f9:
         77:61:35:42:4e:01:25:79:dd:c5:9c:c8:10:64:11:b3:57:4b:
         eb:83:dd:cd:aa:74:d7:b5:80:82:84:90:8d:a9:3a:75:4e:9f:
         f3:eb:3f:63:e8:8f:35:9c:bd:cd:2b:ad:16:1a:33:18:68:10:
         9d:90:d4:b7:cd:94:1d:11:31:78:3c:f0:85:ba:cd:4b:65:9f:
         2a:eb:84:e2:39:6e:44:6d:89:5e:cb:69:6e:89:6d:a5:2f:a4:
         77:25:7b:3c:97:ef:81:5c:a7:29:6a:40:ef:24:7c:26:3d:c3:
         67:0c:f4:d3:99:2f:48:f9:5d:d4:26:b1:8d:71:7d:41:9d:cb:
         da:66:82:2e:19:10:0a:99:2d:41:ca:fc:07:1a:b8:89:0f:d7:
         44:d0:a9:6f:1a:50:33:51:bd:35:2f:8d:85:2d:eb:18:48:33:
         75:19:fe:dc:a7:bf:2c:9b:ea:b9:45:c6:6c:32:92:7a:cf:24:
         2f:59:af:c4:d7:63:f5:83:f1:d2:0d:34:47:08:2a:42:83:75:
         00:c3:0e:db:d4:c2:80:08:ef:fe:d7:9b:42:77:c4:3f:f0:8a:
         64:1e:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----