Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File:                     D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier:          Q70TO0vM19aiui7jda5+0DYd0qeLJ6xcQ2gvRWSqzJw=
Subject key identifier:   0A:C6:17:4D:F7:8A:D3:B5:E6:07:42:BE:31:16:9E:8A:4C:95:36:BC
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer:       /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial:       01962ECFCCF0AE4A26ADBEC83C7308F9ECE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number:          13C8
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
                          2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: PZ1XCAUzdeaWTtNlEmsJKimqc7PBSNRlxWK/deLwLpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:f0:ae:4a:26:ad:be:c8:3c:73:08:f9:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=0ac6174df78ad3b5e60742be31169e8a4c9536bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:37:2c:95:70:82:a7:fd:7f:5d:7a:77:85:
                    d5:46:6d:e9:93:fb:d2:d4:5d:39:87:cf:b0:2e:13:
                    44:ba:b8:43:9f:1d:e9:1e:65:75:41:34:57:9c:2d:
                    48:a1:22:c2:9e:a2:c0:28:01:f7:39:df:b7:b6:5c:
                    9a:c2:e5:99:6e:73:35:a0:5e:b6:8f:93:bd:5a:0a:
                    2c:1e:2c:f4:d2:cc:d2:07:0a:d7:74:61:b7:c7:a2:
                    ff:86:24:d4:b4:bd:46:d3:4a:a5:36:4d:9c:49:17:
                    c9:6c:7f:77:59:ca:22:10:7f:4d:15:8b:52:38:52:
                    da:9b:f2:10:0f:08:ae:14:ea:08:52:ee:7b:b0:48:
                    fa:a0:c3:c7:13:7d:cd:03:09:36:0b:6c:d4:65:7d:
                    8c:31:ed:99:f0:9a:1b:57:88:7b:6e:9b:c8:c4:67:
                    c7:c4:d5:d7:71:cf:b6:9b:70:96:e5:97:f1:24:55:
                    a9:ab:63:42:ff:db:f2:59:b2:0c:3f:b2:db:90:86:
                    43:f6:15:8a:a8:d9:2a:e7:78:f6:03:16:8f:7a:79:
                    ca:be:d5:43:13:ce:43:04:3d:34:b0:02:6d:0d:d8:
                    b9:96:dc:66:0e:1f:31:88:85:a4:bb:d8:aa:89:c9:
                    02:cc:94:b6:e9:da:9f:51:4e:a3:f6:ca:99:1f:40:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:17:4D:F7:8A:D3:B5:E6:07:42:BE:31:16:9E:8A:4C:95:36:BC
            X509v3 Authority Key Identifier:
                keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:49:ae:b9:2e:6a:75:5a:71:6a:1d:3b:67:26:a8:64:c5:58:
         e2:a0:56:1f:ac:f8:29:ea:10:ac:fb:8b:a3:d2:34:01:15:75:
         4c:5e:58:23:16:99:a6:da:20:98:88:42:51:0d:32:c5:10:8e:
         c8:dd:8f:a3:b2:14:d8:6b:88:f4:b8:74:9a:46:54:04:83:3e:
         5f:ec:66:c1:d5:15:9b:8d:b1:8b:84:df:53:44:43:9c:e4:44:
         86:22:c6:7d:d7:69:95:92:d7:d0:48:a0:95:d6:f5:66:b9:ca:
         44:a2:a8:4a:4f:54:f2:96:24:8b:15:0d:87:58:0b:0a:f8:07:
         b2:3d:16:c8:ca:f1:76:c7:65:c3:6d:c1:22:cb:c7:94:1e:23:
         ad:cc:85:f9:52:bc:46:c1:38:0c:6e:ef:1f:64:50:90:b3:65:
         74:aa:74:ae:f3:f9:42:0d:27:16:55:0a:d8:1e:22:1d:f8:19:
         1a:ee:21:0e:cd:79:89:db:66:bc:8d:39:d1:11:3b:87:bf:12:
         eb:03:72:62:96:86:87:b5:fc:82:c3:58:ef:db:fa:ce:ae:f9:
         17:bd:c3:b6:a8:c0:86:41:83:d2:b6:be:b3:2a:bc:f7:68:9a:
         0e:2a:55:9f:e5:ed:cd:03:fb:15:3e:77:55:a4:35:60:c2:d1:
         40:11:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----