Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File:                     P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier:          E1yLyoEFNqskJasknInPHBI5qXnuZ4p6w6e4mVzbafs=
Subject key identifier:   96:4B:6D:9E:FF:8E:36:1F:F0:CA:25:E7:BF:30:8F:06:62:75:EE:29
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer:       /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial:       01962DF3A1B07C6F32EA3D390A0487BED47C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number:          13FC
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: wdmSPz3aWHUnDTJjHAKytyaRrDfc7t4mDjscTLiS1xM=)
                          2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a1:b0:7c:6f:32:ea:3d:39:0a:04:87:be:d4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=964b6d9eff8e361ff0ca25e7bf308f066275ee29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:87:92:1a:fe:4e:c7:dc:e9:0d:7a:a3:d8:
                    4d:ac:68:90:29:8a:d2:87:e4:19:e2:cc:14:d6:5a:
                    fc:65:f1:21:4e:c9:7f:6e:0e:2f:40:97:bd:cc:71:
                    f4:23:a6:2f:21:41:02:63:b8:c8:03:a2:eb:e7:5c:
                    24:8f:55:c6:3d:d6:e0:70:f7:92:c1:7d:57:30:b4:
                    85:b5:51:57:03:50:83:ea:8d:79:cb:9d:d0:de:eb:
                    a1:7a:fa:92:b6:8f:f4:02:3b:19:c5:dc:76:f5:e2:
                    fd:92:b1:d2:da:08:65:15:68:db:51:27:47:a4:b1:
                    56:69:5b:9c:f5:55:8a:a0:94:93:c7:f4:0d:f9:c3:
                    cb:ce:f6:d2:c7:3c:41:76:ca:e3:a9:73:66:48:74:
                    79:f3:a3:69:13:6c:5a:d9:eb:39:d4:8a:3c:ee:37:
                    4a:e5:e1:f4:ad:89:18:cb:8b:56:77:43:e3:c7:45:
                    b3:25:7a:e2:bd:51:ed:76:e7:9b:e0:2d:ba:bc:26:
                    69:86:ed:40:88:3d:63:5c:19:49:1a:af:5e:74:23:
                    59:2b:7f:36:64:0d:a9:88:46:b9:68:6e:75:e4:73:
                    70:c7:05:cb:a8:e3:f5:13:5e:89:58:56:f4:9c:47:
                    f3:4e:6f:92:52:b4:1c:c2:85:e2:75:93:c8:9d:4f:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4B:6D:9E:FF:8E:36:1F:F0:CA:25:E7:BF:30:8F:06:62:75:EE:29
            X509v3 Authority Key Identifier:
                keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:d8:ae:8d:9c:ee:ad:5b:db:42:97:42:50:65:b6:fe:db:
         99:ec:da:a4:57:bf:10:5e:e8:05:45:6f:65:7b:19:90:a8:18:
         43:2e:b5:78:f5:1c:04:6e:90:c9:36:c8:cf:86:07:fc:ab:54:
         ba:76:9b:85:b9:0b:32:ee:cf:db:c1:26:47:d7:6f:2f:7b:8f:
         39:51:10:73:7c:69:8d:0b:c3:e7:94:2c:fd:cb:fc:6e:68:f0:
         ff:e5:a5:4c:6e:bc:60:16:9e:44:55:90:51:82:20:35:25:75:
         d9:c6:32:0d:77:a3:6d:a3:8f:9d:c0:8e:50:8e:18:b8:90:9c:
         f0:14:43:8a:d1:96:32:14:96:c1:51:e6:7e:e7:b3:6e:2e:9e:
         af:61:5a:d3:b2:01:4f:58:c4:9b:f1:21:c3:7a:07:3c:4d:a5:
         b1:56:aa:9a:b4:52:1c:d9:fe:16:cc:7b:00:e2:25:be:c6:3d:
         d6:61:46:01:62:6b:37:ec:d2:93:a1:76:83:e2:b4:27:f1:6e:
         28:c6:0d:15:75:72:d9:57:8e:4c:97:fb:5e:c0:f5:88:ff:78:
         ef:5d:d3:8d:39:8a:73:79:7a:9a:c8:ff:83:a1:40:7a:67:9d:
         cd:7a:00:ed:ec:ee:44:f5:6c:41:76:88:40:4f:40:a1:32:5b:
         99:d2:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----