Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File:                     P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier:          h/nMnjeouh0c/MrRy6rR/mARM1HIWm5UPsY65/14odw=
Subject key identifier:   09:C6:AF:11:A3:62:86:24:C2:6D:A2:61:94:70:1B:7E:41:40:C9:8B
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer:       /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial:       01962F06C2BF86456509D84F10C0EEBD5B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number:          13F6
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: S0REtC8b2nhXXBFvLUggAHV90so+87H8HaOTeYbf6R4=)
                          2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c2:bf:86:45:65:09:d8:4f:10:c0:ee:bd:5b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=09c6af11a3628624c26da26194701b7e4140c98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:a8:ab:68:5e:7a:9a:0f:3e:4d:95:f2:5f:
                    93:c3:af:29:e0:72:e2:7d:d2:5d:db:0c:a5:06:6e:
                    e5:a6:da:7a:9a:a5:71:de:38:82:3c:81:8a:2c:6c:
                    4b:45:93:60:8f:ad:a1:78:d6:8b:30:07:12:11:4c:
                    57:b4:6f:08:29:50:c3:46:01:34:a9:53:7a:98:67:
                    e3:dd:23:3f:c3:c9:15:ef:7c:4f:ed:b5:4c:41:09:
                    31:47:ea:6e:8f:b4:19:86:cb:ab:39:12:2c:bc:71:
                    18:19:6d:a9:47:d5:59:5b:a5:f0:dd:cc:6b:13:43:
                    f1:15:c9:a7:9f:d1:8e:53:d3:4a:f1:0b:42:2a:af:
                    ac:b1:56:a5:66:6a:50:bd:2d:ad:5c:22:b1:83:b7:
                    5a:ba:6f:ac:5a:80:4a:b6:7a:6a:eb:95:66:d1:d6:
                    57:8e:9e:21:b8:63:15:da:40:e1:17:45:70:d1:a0:
                    49:fb:c5:6f:81:c8:21:b5:98:aa:d3:f4:89:7f:ac:
                    bd:75:ba:ce:fa:da:5c:49:c8:91:ae:e4:4a:4e:09:
                    e4:90:d8:4a:47:45:f1:4a:34:1a:5a:b0:e1:c4:88:
                    8c:31:ef:b1:74:9c:7d:29:f1:63:4a:3e:de:67:8a:
                    02:50:ee:03:ea:dd:41:b7:cf:7b:fd:b7:c6:16:ae:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:AF:11:A3:62:86:24:C2:6D:A2:61:94:70:1B:7E:41:40:C9:8B
            X509v3 Authority Key Identifier:
                keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:99:e0:32:a7:24:2c:da:ea:03:1a:01:bb:b1:91:e4:28:
         b3:35:6a:4a:b2:53:c2:40:c3:ab:25:93:ed:7c:35:1f:94:99:
         32:d7:51:c6:3c:64:4f:07:77:75:d9:87:ea:33:0e:5c:00:0b:
         ff:e4:8e:83:1c:d1:7a:e6:d1:d7:b1:0f:5f:a7:99:b8:ec:c0:
         21:ec:4b:6c:61:30:21:f0:ca:d2:42:fc:fd:2a:17:32:26:a8:
         97:7c:39:f5:6b:5f:6c:73:ce:25:c5:f3:a4:3b:7d:6f:e7:c7:
         f8:cf:be:8b:21:83:60:20:c3:0f:9d:6a:3b:61:9e:7a:57:8e:
         05:1f:32:f0:ce:2f:20:33:04:28:9b:7f:9c:3b:69:eb:62:cf:
         2f:17:49:75:e6:cd:91:c4:fd:30:3e:68:57:3f:69:e9:dd:6c:
         6e:fa:3c:a1:e2:cc:83:b4:25:a9:d8:5e:dd:37:1d:d1:86:aa:
         b8:24:2e:19:6d:00:88:78:a2:1f:88:4e:8f:53:fa:df:51:a2:
         31:84:54:f7:e2:e9:0c:44:13:ab:32:4d:05:f5:93:17:23:8e:
         0d:94:45:49:2a:32:28:d1:c6:e8:00:8b:7a:00:fc:88:e1:d3:
         08:93:c7:f9:d6:95:64:c9:21:ed:8f:82:5e:58:11:37:34:9d:
         2b:5c:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----