Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File:                     cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier:          MOFD2vbuG5E1JqR3hkPs7fkf9kbZPf5wzcbKVV/MIqA=
Subject key identifier:   E5:23:D5:E6:4B:D0:63:47:4C:48:18:D1:E0:B2:2C:68:0F:E0:AB:81
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer:       /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial:       01962ECF6D8F28924EC1F5ED3B994330037F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number:          065C
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: QZoLuFkftySTBFXm0IVGsdEjWSc.roa (hash: OleeaSAA+3wpsX1eMFtI7iInTKkVtH+3kKO3RFIPMMo=)
                          2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: Bzc4u2eyNaIo3Cw4fQkrGetModMyvaq0fso7fOl2lY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6d:8f:28:92:4e:c1:f5:ed:3b:99:43:30:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=e523d5e64bd063474c4818d1e0b22c680fe0ab81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:79:62:15:7b:9d:94:3c:51:d0:cd:2e:92:
                    8b:cd:3c:56:0f:2b:69:20:e4:6d:4a:af:e0:1b:94:
                    d3:5a:ff:62:4b:1e:b0:9d:f7:cd:60:00:62:35:85:
                    9c:bf:62:1f:1f:e1:55:ed:fa:2b:d1:84:f2:b2:26:
                    1b:8f:b8:07:fc:f3:70:a0:bb:0f:fc:f7:94:11:09:
                    6f:fe:e6:90:86:ab:d0:e4:7b:a8:15:86:b9:14:7e:
                    c4:56:e2:61:bc:c9:12:a7:e9:63:46:b5:98:d2:4f:
                    93:23:b5:63:9f:c0:f0:b9:85:96:08:e5:6d:7a:c4:
                    a6:6d:c6:25:08:9b:45:d2:f1:83:01:4c:9f:f7:21:
                    11:fe:60:31:b6:b4:64:13:31:d5:97:08:fd:fb:26:
                    20:c8:b1:16:79:58:8f:d3:68:d3:0f:72:aa:6e:ad:
                    15:91:e7:27:fb:02:c8:4b:d8:2e:fa:e5:de:a0:6b:
                    ae:ff:79:ad:23:af:74:0a:9f:dc:0c:14:d7:c2:7a:
                    9e:d5:72:9f:b2:49:cb:61:71:76:0f:a5:04:b9:07:
                    07:d5:1c:08:f6:83:26:58:9f:e2:3e:72:67:8f:bb:
                    72:9f:98:14:22:0d:24:74:63:ed:7f:c1:e3:bb:4b:
                    23:2d:42:2e:cc:52:03:9b:de:84:3f:a9:f0:15:18:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:23:D5:E6:4B:D0:63:47:4C:48:18:D1:E0:B2:2C:68:0F:E0:AB:81
            X509v3 Authority Key Identifier:
                keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ef:25:37:a9:90:f5:dc:70:99:34:f2:42:1e:c2:db:37:c6:
         39:c4:95:cb:85:43:21:ca:22:52:18:5f:7a:d6:6c:4f:e6:a7:
         53:1b:5b:46:07:fd:f5:8a:3c:61:af:b7:e1:e4:c2:16:c6:6c:
         61:89:a9:39:aa:6f:84:ca:d9:85:aa:ff:b9:9a:03:c9:04:fd:
         f3:ae:03:ac:fc:85:87:ef:86:f4:44:89:05:f1:5c:27:07:e2:
         84:bb:61:02:e0:e8:5d:c7:2c:9c:0e:8f:5a:7e:5b:13:e9:03:
         c2:25:d0:08:df:e2:64:13:67:a7:c2:2f:e6:26:03:49:4b:ed:
         17:c0:90:bc:98:82:69:27:63:ec:3e:4c:ef:bc:55:3d:af:18:
         a9:6d:91:15:95:be:08:3d:22:de:ab:eb:3f:da:cd:15:76:c8:
         0f:50:95:dd:bb:f8:df:eb:a9:e5:7b:37:20:e5:c4:de:d9:fc:
         0c:04:0b:3a:18:50:cc:a2:9e:57:09:42:cd:71:51:d6:bd:e4:
         36:26:c5:5d:48:fc:4a:58:a9:41:dd:5a:34:26:ef:5a:70:77:
         7a:2e:cb:d4:36:54:c7:7c:6b:10:80:ba:f0:4c:c2:3f:ae:bf:
         26:5f:54:06:24:7f:42:ac:f7:73:25:be:45:ee:83:1e:a9:3e:
         0a:db:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----