Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File:                     3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier:          fvqiCOzAoGqLZpfz4LYnLPKVOPaOXmeETj+BrYaqNJ8=
Subject key identifier:   7C:EA:49:7C:05:E2:6E:AA:6F:19:74:B8:62:14:EB:80:9D:14:44:C3
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer:       /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial:       01962ECF93BBCA050FCDCBEE5CBABFA314C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number:          0ED0
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: GjR2VqHeE3N8zEGfx32mt+1qNvgdMFz7IFtZaCKiJ1E=)
                          2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
                          3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:93:bb:ca:05:0f:cd:cb:ee:5c:ba:bf:a3:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=7cea497c05e26eaa6f1974b86214eb809d1444c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:48:74:71:ee:00:a2:76:be:d4:d7:1c:9f:b4:
                    9b:ff:ec:28:7a:d6:d5:9e:e1:e8:6c:86:30:bd:d5:
                    07:d7:5b:50:ad:89:3a:8a:44:4e:e3:6c:a9:5f:fa:
                    86:a7:ff:5c:ff:22:ee:ad:b9:74:ad:59:d8:f3:60:
                    55:05:87:74:11:f4:83:72:c4:c7:0c:25:6b:a1:a9:
                    40:d9:ab:78:43:ac:69:4f:39:ff:40:6b:ef:85:ff:
                    06:da:24:57:bc:b0:5d:ec:a4:64:af:51:01:3a:94:
                    4c:92:ea:f7:53:25:95:c5:61:8f:9a:cf:82:84:a3:
                    70:02:fe:e2:5e:4d:d7:d9:c3:13:a6:27:2d:0b:83:
                    7a:39:9a:60:d9:88:85:28:e8:e7:4e:5d:83:7f:b3:
                    bb:16:30:e0:de:77:64:7f:e2:f9:99:71:2b:01:79:
                    69:c5:16:bf:ff:f8:57:46:a4:70:bc:9a:8e:7d:76:
                    f1:0b:62:cf:8d:f3:95:6c:99:a7:e1:c5:b7:16:4c:
                    ab:b7:7e:92:0e:cf:ba:d4:45:17:60:6e:bd:7a:ca:
                    43:c7:cd:c0:a8:fb:71:0c:fc:f6:bb:83:1e:2f:7b:
                    27:d4:21:79:e4:71:a5:d5:5f:0d:0b:d2:d4:6d:78:
                    6b:ab:3a:e8:b0:07:6a:f4:f8:db:80:3d:c1:60:93:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:49:7C:05:E2:6E:AA:6F:19:74:B8:62:14:EB:80:9D:14:44:C3
            X509v3 Authority Key Identifier:
                keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:15:df:15:f9:2b:af:e2:62:bf:e0:21:a7:a6:53:e4:f1:
         53:69:13:20:1c:b4:84:fd:9a:69:92:95:cc:98:7c:8a:b0:43:
         0d:7c:59:bf:0f:93:0a:57:6b:43:5c:2e:8b:84:ac:1d:7d:6f:
         42:7b:96:16:8d:68:d6:02:06:af:7d:30:d8:9e:c9:75:69:6b:
         10:f5:61:d5:68:9f:a4:aa:78:ea:3a:a8:a5:e2:c9:4b:5c:5a:
         1a:dd:cc:f5:99:69:c8:df:20:4a:1b:9c:54:9d:aa:8f:3f:6c:
         35:4a:34:54:3c:5a:47:ae:36:2a:9d:16:0f:95:70:ae:aa:0c:
         05:13:c4:dc:d0:16:c2:83:da:ce:55:2c:a0:ae:e4:52:ff:e1:
         e9:1a:2b:6e:a9:90:ca:53:d4:0d:7c:32:36:54:81:e5:7f:85:
         f4:a2:38:01:a7:80:2e:42:bf:5d:57:de:7a:aa:55:21:98:f8:
         a4:a1:4d:22:4c:11:fa:56:e3:7b:96:51:24:86:da:71:a6:53:
         3f:bc:ca:4e:1a:0c:5c:4a:73:54:83:46:32:80:3d:e6:90:ba:
         e2:87:84:dc:7a:a6:41:49:cd:ab:9a:2d:8b:97:dc:72:86:e6:
         62:17:bf:1f:a9:f9:0b:2e:96:35:8d:fb:cf:4c:36:b7:a0:34:
         5d:5c:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----