Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File:                     DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier:          v0XTb86YcR/68QCvG3uA0MFnKNNqVQ/DDXeE/41zMcc=
Subject key identifier:   69:14:1F:D3:61:7A:83:F7:C4:FB:BB:AE:C8:1D:FF:44:AA:F5:C0:88
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer:       /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial:       01962F0691F1D2B1468D64370B2F2FE06901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number:          01DD
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: 4wqXEAOHJi1QBiWX65Ka4UNceIroUIySq/5ZrOfC8dI=)
                          2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:f1:d2:b1:46:8d:64:37:0b:2f:2f:e0:69:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=69141fd3617a83f7c4fbbbaec81dff44aaf5c088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:86:b8:5d:4f:9f:1f:8c:67:a1:a7:10:01:
                    4f:49:29:e4:4e:02:c4:11:74:4a:b5:61:cb:da:0c:
                    09:3c:c6:3d:da:bf:af:28:5f:23:10:dc:10:dc:61:
                    59:be:d5:da:61:83:cf:a5:52:e2:37:b9:00:23:7b:
                    8a:0b:4c:cb:e3:fa:ac:f2:87:d6:3d:cb:d5:23:13:
                    c3:47:48:8e:96:b2:76:64:74:20:27:7f:59:cf:b2:
                    22:31:19:70:ce:97:0d:12:bc:af:df:8d:08:a2:27:
                    53:06:95:9f:db:6f:2c:71:e3:de:fa:6f:5c:21:7b:
                    0a:32:2d:74:76:6d:dd:52:cd:1e:e9:04:d0:53:f1:
                    26:b1:db:b6:a2:b3:e1:62:fd:06:0e:de:6e:4d:42:
                    f6:26:3c:18:a1:c6:46:0c:9a:0f:bf:48:f8:e0:5b:
                    2b:f3:0b:55:06:e8:c3:d0:86:ff:99:b6:9a:e6:b8:
                    e9:29:bb:f5:73:53:c2:02:38:b0:e8:6c:fb:d2:de:
                    c4:a9:2f:90:74:98:ce:b2:ec:87:ca:6f:06:da:a1:
                    3b:2c:5a:35:77:40:63:e5:03:ff:16:de:64:10:c6:
                    c6:23:ce:29:b0:0a:82:9d:ee:96:2d:21:69:19:b4:
                    e3:4c:e3:0e:7e:a1:fd:41:bc:d7:2a:38:47:5d:f4:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:1F:D3:61:7A:83:F7:C4:FB:BB:AE:C8:1D:FF:44:AA:F5:C0:88
            X509v3 Authority Key Identifier:
                keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:2a:b0:af:ea:fe:6d:1d:f6:3d:23:3b:d1:1c:25:e2:7b:
         75:58:11:ae:f2:40:83:ae:9a:ac:a9:1c:71:44:69:ca:57:44:
         9a:55:7c:ff:64:4c:c9:aa:df:4b:3b:8f:c8:25:1b:16:0a:e1:
         55:8d:c5:60:bb:af:89:f2:1a:02:7c:cc:07:15:e2:ec:46:4b:
         38:3b:2f:b0:85:87:c1:6f:83:f7:99:ab:54:0e:41:df:70:77:
         c3:84:81:50:19:53:53:02:00:f9:78:df:e1:82:71:fd:6b:65:
         06:19:8e:f0:c3:5b:4c:70:9c:94:d2:1c:1d:8b:a3:f1:67:50:
         d7:35:1a:55:c2:55:d7:e8:8a:ed:2c:1e:a2:f2:78:c3:e7:31:
         c7:8b:dd:e0:0f:33:36:ef:67:b1:d9:dc:8d:4f:26:a2:2e:62:
         40:bb:6c:0a:88:4e:06:a9:2c:2f:2a:ac:31:b7:b4:e9:cf:83:
         06:bc:ba:c5:e1:9b:5e:c3:49:84:b7:8f:38:07:a2:12:1d:ae:
         f8:e1:f8:d1:c0:bd:ef:b7:2d:45:b2:c0:2b:70:c2:8f:22:b6:
         8e:ae:ec:aa:89:44:70:6a:01:09:7b:cf:e1:ad:b9:d7:96:49:
         97:2c:f9:df:6f:5e:39:22:61:81:2b:24:3d:44:ec:20:9b:c0:
         9b:b1:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----