Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File:                     Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier:          fYIW+mtP2VYwQP/krZEI+2PLy9oFGTxh4dcGYPHMxsI=
Subject key identifier:   E6:23:72:63:30:32:98:2B:7E:E9:33:CC:64:72:94:0E:83:12:69:F1
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer:       /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial:       01962E6171FFF6E110E7D0100078E05ADDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
                          2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: q8GESYhm5mhMYH1WT1j7J/aoCH1EVYpuX7Djfk4Z9UQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:71:ff:f6:e1:10:e7:d0:10:00:78:e0:5a:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=e62372633032982b7ee933cc6472940e831269f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:55:8e:42:ee:da:d8:48:c2:ab:65:2f:bb:
                    11:68:51:19:92:49:0b:08:0e:53:ed:35:55:0b:fa:
                    02:60:91:cc:2d:eb:f7:87:e9:21:3c:bb:10:c1:6a:
                    1b:b7:87:9d:0f:b9:7c:d3:a7:70:3a:e7:25:69:12:
                    1d:19:0d:69:66:11:86:70:0d:80:8e:3b:1b:9d:6e:
                    fb:13:69:1f:2c:6a:71:b6:87:16:65:27:91:02:da:
                    4c:8a:37:53:25:aa:7d:5d:08:92:ad:36:2a:dd:b4:
                    db:7b:8f:db:b1:e1:d2:61:c1:b2:b8:17:42:12:aa:
                    f1:2b:55:b6:25:9c:4a:9d:a7:85:40:5c:7c:2d:ad:
                    99:df:aa:b8:ac:5b:6a:7f:2d:ff:c2:cf:79:4e:50:
                    f8:3f:51:39:6a:b2:c9:b4:f3:5d:6f:75:72:31:77:
                    6f:74:6c:1e:61:78:f8:6d:b4:02:42:86:7c:8d:56:
                    7e:ec:97:b6:7f:f7:03:3c:d9:16:61:59:c6:f0:52:
                    53:fa:1b:35:2d:e7:09:10:6d:be:84:93:d6:e2:27:
                    28:5f:fa:95:4c:f9:5c:23:e5:3e:63:de:16:8a:5e:
                    bf:e2:77:97:f3:b6:63:35:32:98:bd:9d:27:30:36:
                    f6:e1:1f:d2:e7:17:8b:89:0e:7a:a4:68:8b:cf:06:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:72:63:30:32:98:2B:7E:E9:33:CC:64:72:94:0E:83:12:69:F1
            X509v3 Authority Key Identifier:
                keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:e6:79:86:26:1e:0f:0e:55:60:67:ff:19:b5:ba:b0:3a:
         b4:5a:57:a2:cf:75:1a:0a:52:42:90:7b:75:e4:09:e4:ff:3f:
         d1:91:5a:dc:31:aa:fd:4b:c9:34:cc:b5:51:47:a9:09:1f:4b:
         42:3a:b6:68:7d:14:4f:05:62:13:0b:a9:ae:02:6a:b2:79:11:
         a9:49:b3:84:d7:1d:d6:ab:51:7f:b0:2b:46:c7:3c:fa:29:50:
         70:15:2e:8d:70:f7:6c:53:c1:2e:2f:32:62:3b:9c:e5:37:11:
         99:75:9e:de:43:a9:fa:ce:f8:e7:91:49:85:01:fa:e9:e8:e8:
         03:d5:33:48:88:c4:69:06:c7:63:72:f1:29:6b:16:f0:ea:d5:
         83:e6:af:c2:db:ad:ca:c3:59:f1:01:0e:82:03:46:97:49:c7:
         48:14:8f:f4:7a:6c:af:b6:b9:57:3f:75:7e:f8:10:40:ba:3d:
         33:74:19:f2:e4:86:26:e9:46:9c:73:70:68:a0:25:0e:d0:a3:
         7b:a4:6d:5b:9f:2f:a2:12:ae:43:87:17:6d:9c:6b:65:c6:bd:
         ba:18:94:a4:02:d0:dd:6f:27:e6:f5:be:39:15:fa:4d:cd:cf:
         1d:e7:17:60:c2:fa:48:ed:3a:da:03:d6:31:c0:f4:e1:f0:8a:
         b6:22:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----