Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          MQ6MNexs+eWYTxLqsibc/VQ+Rr85LOdfvNRcR5LMqKA=
Subject key identifier:   23:E4:BD:4D:22:07:81:93:12:1B:9C:A0:CE:F8:F6:64:99:A8:5E:DC
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       01962F3DB3D2678C7AA9CD5145ED65D6D9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          12BB
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
                          2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
                          3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
                          4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: 8UZ+1V1FzO7zGwTMZTJIrF42QLPgxYWXFePn5WyDR/I=)
                          5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:d2:67:8c:7a:a9:cd:51:45:ed:65:d6:d9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=23e4bd4d22078193121b9ca0cef8f66499a85edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:93:73:a7:38:02:7a:19:6a:31:ee:62:d9:
                    76:7f:b7:d7:93:dd:b7:03:64:8b:de:8b:17:94:fb:
                    b6:14:4b:d5:ea:74:27:78:c8:b7:e0:f0:e6:8b:ea:
                    23:b3:af:67:07:19:93:8c:66:13:e5:04:93:ca:e8:
                    25:95:9d:c3:54:a3:c7:db:c9:fc:5e:8e:d3:8f:b0:
                    c1:d9:42:3f:49:ec:77:e1:dc:e1:c2:16:15:6c:f1:
                    0f:d6:e4:85:2b:a4:51:2f:90:ef:c7:ea:b7:ea:82:
                    e2:63:8e:74:7f:90:6e:b2:99:23:cf:30:87:56:3f:
                    ce:4b:64:b6:57:0e:41:16:26:62:12:31:11:cf:82:
                    5d:14:4b:cc:bc:b9:aa:dd:33:5d:bc:e2:42:33:59:
                    28:51:30:85:b7:d8:99:f1:ea:14:53:65:0a:4a:46:
                    b8:8d:40:00:5e:de:ab:21:0e:a0:28:db:c0:ae:ec:
                    ec:12:12:bc:e3:f0:78:17:a7:f4:23:6b:ab:17:0a:
                    0d:9c:0b:30:05:ad:f5:d5:33:f8:34:30:95:2e:ea:
                    04:fa:d5:7b:b1:c9:8d:43:0d:7d:22:3b:a5:c8:2c:
                    29:b0:55:03:6b:a5:81:55:4a:66:63:59:6c:9a:86:
                    07:11:5c:3a:0e:e7:96:d8:a8:07:41:21:c8:f9:81:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E4:BD:4D:22:07:81:93:12:1B:9C:A0:CE:F8:F6:64:99:A8:5E:DC
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:32:09:9d:1f:a4:81:58:bb:c4:5e:4a:d4:b0:09:78:51:83:
         a8:9c:41:5d:a8:ee:15:26:a3:27:9a:65:4d:96:be:5c:c7:8c:
         3e:7b:ae:46:56:63:7b:5b:9a:32:e8:bb:cd:13:4f:b7:5f:26:
         48:94:5a:da:b2:75:98:cb:db:4e:d3:14:9c:c5:ad:9e:03:59:
         f5:30:20:8a:23:9e:70:9a:b0:75:d7:e0:9b:4f:4c:66:65:c2:
         86:f5:2c:4d:f6:7d:00:f6:51:dc:41:6a:97:f5:dd:12:b6:40:
         45:e6:7d:0b:ee:2c:8a:01:e7:1d:3c:12:e9:7b:75:5c:28:c5:
         cc:f0:c2:b1:0e:0c:3d:4a:98:f6:a9:07:87:19:e8:9c:eb:1a:
         47:63:a9:8c:b0:e7:26:69:1e:58:4d:93:d5:b5:fa:d0:8c:c7:
         fc:af:9a:0b:75:f8:4d:1b:75:e5:00:6b:f6:43:8f:57:84:73:
         ad:0f:ce:96:2f:b8:ff:a3:8d:a2:32:1d:c7:81:5c:01:c1:ef:
         f1:fa:7d:39:35:e1:6b:e3:e9:e8:b2:3c:4c:c7:b7:c9:cc:f4:
         fb:50:5d:a9:1d:33:d1:af:2b:09:26:51:b7:8a:17:e2:a0:23:
         86:aa:c0:02:2c:6d:ab:3a:94:38:e6:39:45:95:32:e9:db:3b:
         e2:34:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----