Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          zjA+OW4Km9jSUseHBzJcFl0KK7vLp1i6tGNaUgdGdBE=
Subject key identifier:   DC:CA:D0:C7:12:24:95:1F:ED:9C:84:45:21:8D:84:39:58:DA:9D:A2
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       01962F3D7A8B0194ED8C1E3AC6C3ADF2E7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          150E
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: JH+mea3FV9RMDTd/8C4OhjLrAULcSis25QUnyFzWn3U=)
                          3: azDvVJUoNvYqaEaZIhu9OqWr21Q.roa (hash: JWxoJDpKURHEm1uFBb309inT9x2eVZK63cqhRvZkCeo=)
                          4: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
                          5: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=)
                          6: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
                          7: xWzjOiU4GIbFmqwyeVmah8vO8F0.roa (hash: S4iCzl3PC4M/IRKSKX7IIQOXaSNab8mVow5IXg2rGLA=)
                          8: xwhEAx2VE0gucAj4mFhYH2uYVFI.roa (hash: nFpFXOMp97LHbzG3/tbWsearfU/sSkX/vvtwwnlnskI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:8b:01:94:ed:8c:1e:3a:c6:c3:ad:f2:e7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=dccad0c71224951fed9c8445218d843958da9da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0a:c5:e5:7c:fb:2b:e8:f8:52:43:c5:ca:73:
                    e5:43:6d:11:06:ed:02:95:cf:13:63:b4:3f:72:b5:
                    20:c3:c1:65:6d:9a:f8:e5:e7:8b:4e:81:44:2a:55:
                    84:ce:21:4b:f5:ec:9d:6d:dd:29:cb:c4:62:0b:59:
                    25:14:bd:ff:93:3e:67:cd:ea:63:32:6c:e2:73:b0:
                    1c:8e:7b:e3:f8:6c:34:1b:fd:e1:b0:2a:e3:70:98:
                    09:af:d5:e3:73:c6:a2:c2:7b:1c:7c:02:6a:03:f6:
                    ee:b7:49:5b:34:88:09:aa:b1:97:89:3e:c7:bd:74:
                    10:f6:7c:f0:0c:5c:98:14:57:2c:d9:1a:b4:bf:17:
                    46:b2:2d:1b:1e:5d:44:8b:0e:7f:88:b5:f1:ac:10:
                    8a:92:9d:42:07:33:31:2c:44:70:28:71:15:d0:d9:
                    16:ab:36:b7:5b:d5:e7:72:77:07:e5:e4:bd:97:0e:
                    95:75:14:ef:3d:ce:4e:79:d4:b6:a3:04:95:ab:58:
                    2e:57:b5:28:6c:64:74:09:d3:d0:e0:4f:1c:b2:27:
                    1b:57:a4:04:74:8e:25:aa:d1:af:c8:d6:65:eb:ca:
                    1f:9b:66:b9:3a:c0:26:84:83:04:0e:f9:f3:40:1e:
                    e8:7d:a5:3a:28:84:11:f0:0f:b0:3d:f9:dc:f4:45:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CA:D0:C7:12:24:95:1F:ED:9C:84:45:21:8D:84:39:58:DA:9D:A2
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:3a:ce:81:42:87:59:a3:3e:e0:e1:58:8a:ce:72:dc:53:
         95:93:ff:f0:60:75:51:34:7d:8e:22:49:18:35:52:a1:68:b6:
         54:5a:90:9a:61:7c:a9:f1:39:f7:c1:d0:0f:8c:74:4e:e5:b0:
         b9:67:a3:21:c8:e6:dd:3e:9b:3d:30:e6:19:b5:cd:b6:04:4e:
         9f:ed:9a:42:46:58:d9:8d:4f:40:12:bb:43:7d:d6:4c:f8:bd:
         95:86:f8:da:6b:2a:a1:b1:f4:46:5a:b9:45:a4:8b:fc:0d:af:
         cd:b8:88:bc:62:93:64:6b:dc:8c:c9:e2:eb:fd:44:76:e8:df:
         c4:40:31:63:e8:9f:1b:8e:4b:a5:b0:80:56:81:3f:10:8d:8b:
         c7:3d:a2:8d:44:6e:1c:98:ba:93:16:a3:9f:0c:97:7c:27:4b:
         31:a4:37:e3:13:e3:47:b9:ed:61:b6:58:ec:df:87:de:cc:f4:
         fa:5d:1d:71:f3:be:e7:e1:dd:e6:f7:68:41:bd:f7:1d:43:3d:
         47:13:e0:b8:8c:04:34:0d:4b:2a:95:ff:64:82:59:6f:0e:50:
         4e:be:73:73:30:8b:28:7f:da:ff:e1:38:8b:3a:52:de:b1:a0:
         e6:aa:ee:0e:c2:bd:2d:6d:5b:61:3b:51:21:21:2d:19:c5:c8:
         09:2f:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----