Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File:                     3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier:          /uYCZwt9Lc6VbsLFuA2HNKhVrrEpMWnS0ovDLpWJEb8=
Subject key identifier:   DF:95:BD:4C:AD:52:1E:8A:7C:42:0F:C0:3D:03:AD:2B:11:36:89:FA
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer:       /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial:       01962E99C9551CF3F814A2F5C962968ACA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:32 +0000
Files and hashes:         1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
                          2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: 58DZPd3lukbSy3HbSZkzizfQS+eVXcfQCBPfyYeOdRc=)
                          3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c9:55:1c:f3:f8:14:a2:f5:c9:62:96:8a:ca:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
        Validity
            Not Before: Apr 13 10:02:32 2025 GMT
            Not After : Apr 14 10:02:32 2025 GMT
        Subject: CN=df95bd4cad521e8a7c420fc03d03ad2b113689fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:44:03:6d:93:a7:0a:58:0a:93:70:f5:2a:
                    ba:8c:a0:dd:c2:4a:d8:4b:28:4d:aa:aa:0a:f3:b4:
                    55:74:d3:fe:c1:ae:6f:7d:74:e5:26:a9:bf:51:ee:
                    e1:12:4f:79:cd:69:d0:9f:19:70:48:a1:1e:b9:24:
                    cb:10:f6:2b:16:95:d5:16:cb:f0:87:ee:2b:95:7d:
                    76:03:18:55:c6:c3:93:95:31:f6:55:90:5c:ee:75:
                    dc:44:d2:30:bf:68:a1:5e:3d:54:fc:cd:6f:47:d2:
                    bc:26:29:b9:56:cc:f2:67:00:39:30:ce:61:15:74:
                    09:6d:4d:b6:70:a9:d6:31:23:08:ef:f1:18:d1:b8:
                    12:9c:cb:40:32:9a:9d:76:a1:23:3a:fd:22:bb:29:
                    a7:f4:da:cb:1d:58:8e:cd:b2:30:1f:76:5b:7e:3e:
                    01:77:2e:65:41:0d:d0:63:c8:0d:ad:e1:4b:f1:d9:
                    c0:f8:25:b1:a2:fb:c1:ad:ee:11:f1:ab:85:17:50:
                    ea:38:58:ea:31:16:d4:78:d8:0c:d0:ff:ba:9e:4c:
                    dc:f5:8e:d5:74:a9:fb:db:a5:ab:a4:76:8a:6e:c6:
                    86:d5:c3:65:00:44:59:b4:4b:b3:65:fa:78:c3:b9:
                    24:55:c3:6a:71:06:68:2d:9c:5e:db:d6:55:15:47:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:BD:4C:AD:52:1E:8A:7C:42:0F:C0:3D:03:AD:2B:11:36:89:FA
            X509v3 Authority Key Identifier:
                keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:36:f8:a8:57:32:40:59:17:9f:c3:1a:a7:85:d0:97:1b:
         82:53:a2:4c:cc:86:bb:29:b7:2b:53:13:eb:f7:f2:66:76:6d:
         74:27:9a:d3:28:88:73:cd:7d:3f:85:8d:07:85:c2:c6:9b:1b:
         3d:94:d9:d3:79:b6:9f:40:4b:39:a2:c3:55:67:a9:2a:22:37:
         37:d2:4d:4c:c9:ef:b3:5b:08:e2:38:cb:90:c3:e4:01:fc:2b:
         77:81:16:c6:da:d4:f5:12:5d:bf:4f:af:78:e2:c4:a4:95:c0:
         41:71:3e:a6:48:c5:36:a3:ec:d9:19:9f:7d:b3:bf:5c:ee:05:
         e8:a6:64:92:f4:a9:97:c9:5a:08:23:0a:25:59:1a:14:24:65:
         bb:19:e7:9e:6f:8b:88:25:6b:3f:70:29:da:c6:73:27:ee:2e:
         4f:1a:60:7c:cf:1d:22:f9:80:55:47:b1:f4:b1:20:c7:d0:a8:
         7a:56:68:01:8f:2d:6a:5b:06:c6:77:fe:9f:fa:3d:26:ed:38:
         79:db:6c:80:09:12:85:7b:e7:e3:c7:29:21:d3:28:81:01:cd:
         06:5c:ba:63:55:7f:0f:2c:1f:8f:db:95:ea:a2:ab:64:7b:bc:
         f5:b6:68:69:75:69:35:10:16:50:4b:1d:88:b9:13:30:fc:37:
         b7:71:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----