Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File:                     3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier:          8RfTtoCrkAFqk9LonZC2q4c7++OUAA7l3gd37VNNrkA=
Subject key identifier:   AC:4A:65:BF:C4:48:18:AC:2E:F0:4D:87:B0:3E:60:6F:D5:DA:C4:5F
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer:       /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial:       01962FAB5C9EC4727D860C6E7914A183FCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number:          0202
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: q1PXof1jhS5SCQHzSknNu5MyrtpdGZ8gOecXZ1vrcng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5c:9e:c4:72:7d:86:0c:6e:79:14:a1:83:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=ac4a65bfc44818ac2ef04d87b03e606fd5dac45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:e2:65:df:57:74:29:8e:a4:08:bd:a7:3d:
                    35:d6:ee:a3:85:84:9c:ec:4a:7c:fd:b3:f2:be:ed:
                    3e:d3:d1:b3:04:d4:ff:84:c1:c6:55:36:4a:b6:b1:
                    fa:a6:7b:c5:90:69:89:90:6f:e9:17:2c:4d:d7:1b:
                    08:4c:ec:49:fc:16:76:07:6f:77:c4:b3:f8:b9:98:
                    65:f7:55:a6:26:ed:19:05:ff:24:48:f7:fb:7b:e2:
                    3f:88:3e:4a:eb:1d:bb:65:a2:be:e1:05:37:bf:10:
                    f5:45:07:1f:90:a2:ca:fb:e1:31:f3:d7:4a:4b:46:
                    8f:f4:bb:ff:4b:3d:93:64:b9:2a:f8:81:94:b9:2d:
                    00:42:2d:c9:f3:cb:b8:f5:05:79:87:16:86:03:86:
                    4a:8f:60:0a:cc:da:fb:e8:f3:06:1b:41:37:cf:7f:
                    4f:09:2d:28:e5:b7:3c:98:dc:79:82:68:24:4b:8b:
                    44:fb:12:94:88:ca:d0:28:88:bd:50:73:4d:b6:44:
                    aa:1a:85:f0:c6:0d:54:a4:c4:78:3f:2b:2e:d2:12:
                    e2:64:7b:ba:24:1c:71:d5:fe:a1:f1:77:28:6e:28:
                    fe:e8:f8:36:db:77:c5:f4:05:3d:71:89:9c:52:b3:
                    e1:1a:78:cc:b6:0a:b0:13:c5:db:d4:27:60:b6:c1:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:65:BF:C4:48:18:AC:2E:F0:4D:87:B0:3E:60:6F:D5:DA:C4:5F
            X509v3 Authority Key Identifier:
                keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:df:0f:bd:12:b9:57:85:1a:ee:8b:aa:64:59:97:35:39:55:
         26:4a:ab:4a:06:83:52:fc:4f:4e:1a:0b:de:ec:07:8d:36:ed:
         ac:e9:8b:03:b3:24:47:d3:b0:57:4d:de:3f:7d:ab:55:5e:10:
         0b:5e:70:b7:3b:84:bc:7a:0b:80:2a:38:fc:0b:e0:cd:0f:36:
         c6:ed:39:a5:21:36:35:d0:e6:27:1d:d9:41:fc:9d:15:fc:5f:
         4b:66:93:eb:36:d4:8e:30:bc:a4:b9:d9:6f:b8:75:0f:0f:ac:
         e1:c5:17:77:46:ca:df:9e:a2:7a:05:e2:50:9e:25:ea:ec:d0:
         cc:2f:3e:bb:44:aa:85:11:bc:c7:ce:7e:f6:31:86:57:01:e5:
         61:73:24:07:aa:f7:c6:c3:d3:9c:07:4d:1f:8c:22:78:68:a9:
         85:6c:dd:10:ea:18:b4:c5:6a:37:17:9b:75:8b:8f:87:34:11:
         6d:6d:12:35:9d:f2:39:04:5b:ea:cd:5f:de:cb:d1:0e:41:2e:
         dc:10:bb:5b:30:ff:e7:9e:03:4d:c5:45:94:56:0a:73:12:4f:
         3d:0b:24:d3:56:e4:91:65:57:1f:f6:80:b3:48:33:9c:1e:95:
         0e:06:e8:02:bf:af:ef:a1:3b:60:6d:d1:de:20:d1:c9:66:18:
         cf:05:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----