Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File:                     PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier:          WCkvaKRugPHL9FUsuJyRSagrUqXaJ3CpDFPsbRcL63I=
Subject key identifier:   D9:F0:C1:F3:6D:37:F1:F2:DC:2D:D9:27:B9:21:3F:9E:57:BA:67:9B
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer:       /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial:       01962E99D63CDE4D8E408D60F70B9605C6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number:          0453
Signing time:             Sun 13 Apr 2025 10:02:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:35 +0000
Files and hashes:         1: 6px4oQpQxURR5IW0gWezwsCgYUA.roa (hash: aKqSySkiQ4Z3UFY+0fQdpN2yWiQF1RqxRVXfSVXmnd4=)
                          2: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: uEywmlXaJrEIUXGw2wshFklDBknrLBlRbmXPzQnydP8=)
                          3: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d6:3c:de:4d:8e:40:8d:60:f7:0b:96:05:c6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
        Validity
            Not Before: Apr 13 10:02:35 2025 GMT
            Not After : Apr 14 10:02:35 2025 GMT
        Subject: CN=d9f0c1f36d37f1f2dc2dd927b9213f9e57ba679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:08:60:f3:0b:b3:59:e3:c7:14:3c:e7:6c:
                    5f:4d:79:09:1e:3a:ca:1d:83:8a:c8:92:8f:29:23:
                    33:40:da:58:67:c1:40:03:75:7f:47:ad:7e:4a:ea:
                    f6:ae:9d:05:4d:f5:c2:b2:9e:d3:0d:f6:9c:1d:90:
                    8b:61:63:84:8c:3f:a6:13:40:c0:8d:fd:8a:8f:3d:
                    26:55:a0:8a:12:7d:07:2a:ed:51:50:de:66:c5:1c:
                    20:df:eb:cf:28:df:6d:45:85:8c:ea:ab:1c:9f:89:
                    84:d8:eb:88:a2:5a:37:f4:f2:96:ff:f9:f9:68:42:
                    2d:c1:2e:c9:0d:0a:f8:3e:d8:25:b5:14:64:c1:1f:
                    1c:e0:6b:4b:05:3a:78:ed:1f:e2:9c:49:e8:6f:d2:
                    8d:2e:ed:c5:b3:77:b7:31:b3:b3:38:0c:3e:02:39:
                    a7:69:d9:a4:a3:28:48:5d:ae:a1:67:4a:a7:da:28:
                    66:fd:bb:25:c3:35:27:6d:b1:90:2e:71:24:24:85:
                    c2:6f:8e:e0:fb:05:ee:81:40:8c:a7:c5:83:d1:33:
                    3b:90:15:a2:a2:bb:ee:cf:91:cd:be:73:ef:cb:c7:
                    18:23:9c:2a:af:99:40:f6:75:5b:da:43:34:a8:87:
                    58:38:0f:6d:65:df:e1:a2:73:28:77:bc:4a:31:5b:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F0:C1:F3:6D:37:F1:F2:DC:2D:D9:27:B9:21:3F:9E:57:BA:67:9B
            X509v3 Authority Key Identifier:
                keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:34:d1:8f:cf:50:2f:29:c6:e6:dc:e4:00:a4:8a:ff:cf:7a:
         31:73:f5:94:c0:fc:e4:d0:f7:38:11:2e:d6:98:ec:e0:ed:e9:
         97:85:e8:39:79:e1:00:1a:53:cb:e4:51:4f:da:06:2b:dc:f2:
         f6:3c:7d:ab:e5:a0:c3:97:2c:65:2b:74:b0:2e:37:f9:cf:ee:
         d7:dd:9b:fc:c6:28:10:51:10:83:37:04:2d:06:30:83:8a:20:
         ee:94:00:ee:68:d0:7a:7c:c3:0e:d8:7b:91:fe:f7:60:f2:ba:
         0c:74:2d:42:27:4a:20:8f:d6:b4:20:73:9d:29:85:fb:88:8e:
         c2:cd:c1:2f:d2:00:66:34:38:fd:fb:ae:cd:99:ce:5b:7d:d8:
         e0:f7:c3:eb:df:95:98:3b:27:40:5b:a1:f0:60:21:28:b6:a6:
         6d:2b:3c:a2:c7:8d:28:02:b7:c3:c5:f1:15:be:41:d5:c9:87:
         24:8f:40:59:45:f2:a6:4b:19:3b:11:55:a8:76:01:3c:f3:17:
         7a:ff:9e:c6:47:4a:25:38:9f:39:af:fe:51:43:6d:ff:17:94:
         73:aa:a5:cb:d3:f7:56:d2:ac:91:68:a4:5e:ff:62:2e:4b:4b:
         60:b0:3b:68:b2:c5:9c:d0:3f:ff:7f:bc:5b:b4:40:e0:cb:9a:
         64:9b:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----