Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File:                     DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier:          kT4oFrb9DcGkYcfGitYwYVNs7707/rS5CgSg4K1PEaI=
Subject key identifier:   83:D3:A2:3F:94:B7:ED:FE:03:A4:EB:DE:7C:F0:1F:2B:F2:6B:C1:36
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer:       /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial:       01962F0701B40DA132C18C96AF57A8036B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: MAnFo8Bjx60GOVrKiYzPvmU48ZGakJU0MRtIaBJR3Ig=)
                          2: RPI004Nflusi7FfUJpmrxTwPQuQ.roa (hash: +Ae0xcW4fJMWdAq7n5EIK34ZCifbX83L0SoWJBas4kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:01:b4:0d:a1:32:c1:8c:96:af:57:a8:03:6b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=83d3a23f94b7edfe03a4ebde7cf01f2bf26bc136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:ff:f9:87:89:69:7c:f2:a9:56:77:65:a7:
                    86:bd:95:8d:5b:56:47:50:d4:c4:13:28:72:a2:7c:
                    d2:6e:63:e9:8a:2e:38:f7:a9:3f:4f:f7:44:df:52:
                    2c:2a:4a:53:4b:e4:00:1c:f0:4e:fc:da:43:c0:50:
                    ab:18:71:ee:57:05:bb:ff:03:34:87:b4:5e:b2:f6:
                    81:4b:ec:2d:26:e4:e7:2d:01:30:ce:98:f1:a5:dc:
                    fb:cc:ab:c8:1e:56:ea:85:3f:ce:81:f4:89:15:bd:
                    fa:d7:3c:80:1a:13:42:9e:0c:aa:6c:f9:75:90:84:
                    2d:dd:cb:ad:4c:39:41:64:69:96:55:9d:13:a5:5b:
                    42:35:b8:76:ec:ba:0e:2f:fc:a5:d8:0e:9f:62:73:
                    64:53:93:d4:57:e3:50:77:ad:4a:5c:7d:09:00:f0:
                    6f:41:76:f6:b1:89:8a:55:94:c9:da:ed:cf:34:b3:
                    01:c9:d4:4e:e9:f2:8f:66:24:dd:ac:26:c1:03:df:
                    80:06:0a:38:86:dd:e1:70:22:25:dc:9f:a0:3a:09:
                    98:61:17:3f:49:81:d1:f1:41:9a:f6:b8:3a:f9:ae:
                    f9:f0:05:4a:90:a7:8a:93:49:f6:37:22:19:58:63:
                    c7:9a:ea:82:da:c2:69:31:f6:a6:f9:71:45:09:a7:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D3:A2:3F:94:B7:ED:FE:03:A4:EB:DE:7C:F0:1F:2B:F2:6B:C1:36
            X509v3 Authority Key Identifier:
                keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:41:08:00:11:85:dc:41:2a:b7:58:04:64:9c:1e:39:e9:
         e2:b8:55:eb:81:16:68:2f:b8:de:31:12:2a:34:01:8a:30:9e:
         26:8b:e6:4f:69:46:93:2d:5d:25:44:ec:b9:72:30:2e:fb:e2:
         d8:aa:32:a1:a3:a3:c0:b6:7b:fe:4a:61:4b:9a:22:49:0c:fd:
         74:ae:23:89:8e:d8:53:2c:8a:fb:b8:3b:bd:46:c8:55:bc:cf:
         8b:ed:28:c7:9b:65:91:40:a2:c3:83:5a:e8:05:e3:c9:a2:c7:
         11:8a:c7:ff:12:bc:be:29:2b:ad:9c:6b:f4:06:9a:5c:f3:1d:
         9d:d1:1c:dd:8c:38:b4:f0:de:82:4a:a3:3f:db:f5:ce:c3:41:
         46:f9:0f:05:0a:7c:32:f7:ee:fe:6c:6f:d5:b7:15:21:f4:97:
         db:5d:1a:9f:9c:94:61:92:d4:7b:f9:1e:67:7a:2b:f8:6a:b3:
         c6:e5:50:34:f0:68:d1:91:79:44:c4:95:b7:99:10:70:8e:05:
         26:3e:fe:30:33:b0:96:84:5c:b5:96:8f:9a:94:b0:32:3d:3b:
         d9:ac:f3:44:e9:c6:d3:0d:2d:18:f4:f1:29:76:78:90:95:aa:
         80:00:dc:b1:25:5e:80:7e:7a:a3:d5:c4:6d:a8:34:1c:0f:53:
         ee:29:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----