Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          b1T0kS2uKf2vk/jAjOYqoTVrO4y24YpfKovJawpqlrA=
Subject key identifier:   5F:4B:CD:94:84:7F:1B:56:D4:F5:C5:76:49:AB:45:0E:34:33:82:68
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       01962E2B1573AD420CC391E55D29756BAE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0AAD
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: fWHWgJdjzE9pSj7I7oLM25D93sbFSO/T6dkYNAcAZqI=)
                          2: 49OmEENKn2pggkZrla5_tvJAS5g.roa (hash: y2VOplSKaFK6l6b//Hy/89Z9on3Nk836w0LqiWTCSxQ=)
                          3: 98r0bNxXEDMvZ7j6PltFu8qJeJg.roa (hash: EU18mwS21+icltyLGLTMkrjH38LD7S0gNFf/o4/z9BM=)
                          4: lZqh98v1p7SMdnTevU2ohDFVTYU.roa (hash: O0iB20pJ4bqjR3GQawrzp1OwygFy4onsg0mr0/s03uQ=)
                          5: xOL_ByJQJZQBMqDAvRuOKjD76Yk.roa (hash: oV4k7YTonHST8wxb9nEmyy0EnbuDv3hYSGZBk73gZvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:73:ad:42:0c:c3:91:e5:5d:29:75:6b:ae:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=5f4bcd94847f1b56d4f5c57649ab450e34338268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:a3:32:f1:6d:09:e2:21:64:02:c5:80:d7:
                    99:36:9b:f9:19:c1:2a:2e:b9:91:87:9d:89:89:23:
                    94:21:17:9c:4f:c3:a1:21:0a:f0:6f:27:99:b1:ac:
                    4d:cc:d3:2d:64:1a:c3:95:b4:93:29:c7:7f:83:bc:
                    ab:f4:f4:4e:74:67:c8:f3:cf:01:29:f4:c0:2a:d7:
                    2c:e4:02:96:cd:7d:3e:06:37:25:73:ed:be:17:d4:
                    c1:2e:d8:ce:b1:28:b6:f5:cd:12:9e:47:4d:76:f9:
                    23:97:1b:54:84:ac:a6:0e:41:c3:00:a0:14:a9:10:
                    bc:d0:0c:94:3e:76:3b:89:c9:18:a8:75:3b:04:84:
                    a0:5a:d4:5e:d4:8d:b1:ce:5a:ee:9a:19:40:d7:39:
                    6f:24:8a:7a:b4:53:32:53:05:f3:f9:cd:93:36:ef:
                    2c:7e:2c:c6:99:22:c9:31:c2:26:27:3c:17:a6:55:
                    57:24:f1:b9:24:f4:65:f2:77:5d:83:e1:1c:95:b0:
                    cb:00:af:74:99:05:8b:35:2a:9a:76:79:72:aa:4e:
                    0c:a6:26:b1:3a:3a:79:95:6e:76:47:cf:a6:44:05:
                    aa:88:64:92:aa:45:f7:89:82:2c:93:0b:54:e8:06:
                    22:ae:de:91:5b:19:6b:2e:0d:4b:2b:f4:b1:de:2b:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:CD:94:84:7F:1B:56:D4:F5:C5:76:49:AB:45:0E:34:33:82:68
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e1:c2:58:d5:04:78:df:2a:a5:da:ac:46:63:7f:61:c5:9e:
         a4:0e:ac:74:b6:c3:8e:ae:7d:23:b4:9f:99:41:74:5e:18:6b:
         b3:65:be:87:0a:ab:97:2d:e7:d0:d9:69:22:b3:f3:01:de:3e:
         f2:04:7d:df:83:02:91:64:a6:7a:cc:70:15:33:f3:f4:59:02:
         b7:4a:28:18:a5:1c:a8:ce:3a:cb:be:dd:c3:c3:16:50:48:64:
         64:76:19:20:cf:e3:95:a1:0f:ec:49:6f:cf:a5:bd:8e:1e:02:
         83:0a:ce:d3:b2:09:96:b4:5b:a3:47:4e:aa:b1:68:0a:93:91:
         ca:34:77:db:db:a2:00:bd:e7:26:86:11:3d:11:35:6c:42:c3:
         e7:15:c7:06:92:08:64:62:21:b8:95:9f:45:a3:a4:87:52:0d:
         6e:bc:6b:db:dd:cd:a0:ef:bc:a5:f4:59:7f:4c:15:8e:3b:6e:
         61:8b:7f:42:f3:e7:6a:3b:b3:08:aa:20:c4:48:0b:4a:c7:4b:
         be:d0:b5:5b:e5:a4:b4:d0:04:29:00:f6:56:58:5b:6c:7d:21:
         26:72:c5:26:5b:ef:c1:f1:61:c8:ce:44:0f:bd:f5:1f:d6:e0:
         91:62:22:08:a4:84:9d:e1:80:39:52:4f:62:f2:bf:dd:5a:2b:
         cf:4e:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----