Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          2w59vCZOcjgE9SHyBEOA8AhnNqyON6vuZ1/jZJHGuOQ=
Subject key identifier:   AE:8E:71:05:56:D6:50:47:C4:84:64:21:4B:BF:FA:79:1D:62:FC:BB
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       01962E61A51761E3EFAFB75EFF14F6CE402C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: nSzV+neRxtHSJhz4w8QvKdBYWmmXEbjovAMLSyhDWSY=)
                          2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:17:61:e3:ef:af:b7:5e:ff:14:f6:ce:40:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=ae8e710556d65047c48464214bbffa791d62fcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:7c:e8:53:12:6c:53:e2:26:81:bc:2a:c5:
                    8d:7f:48:0f:ae:f5:ab:8e:c7:c2:be:92:90:94:ed:
                    92:09:57:53:76:87:3a:eb:ef:30:5a:db:d3:9b:1c:
                    cb:7a:91:25:03:c4:2f:bf:af:ed:3e:f1:47:28:12:
                    34:33:c8:77:c4:b3:0b:b9:91:66:1f:9b:5f:d3:b7:
                    23:0e:4f:e6:65:d5:37:9a:54:e6:8f:da:bc:56:1c:
                    bb:bd:a6:ab:cd:67:e8:b2:f1:b5:23:ca:90:03:3e:
                    86:f8:17:21:c7:2a:df:1d:82:ee:6b:47:2a:01:77:
                    70:c4:a8:40:59:db:27:54:3e:b0:3a:7c:88:3c:89:
                    00:b9:fd:83:ba:15:5a:f1:ff:f6:0f:e5:17:e1:6e:
                    76:6f:1e:a9:5e:ae:d1:b6:6a:ef:27:41:a0:79:29:
                    06:44:ef:64:b0:59:d9:9a:99:ca:1d:db:4b:30:86:
                    f4:f5:3c:01:43:51:2a:a0:96:a5:a0:ba:b3:e6:e5:
                    b9:7f:2f:21:02:62:8e:ac:14:9c:fb:f8:93:18:59:
                    40:e8:ba:e9:c3:58:f7:b0:56:03:36:f0:f0:8e:0d:
                    9a:95:ab:87:85:6f:0e:19:c7:a8:9a:07:88:2e:c9:
                    88:77:35:4c:a5:50:6d:30:ec:99:ff:02:b9:d9:a7:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:71:05:56:D6:50:47:C4:84:64:21:4B:BF:FA:79:1D:62:FC:BB
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:c8:f1:c1:5a:30:89:e0:d5:c7:db:ed:cf:35:cf:58:fe:
         18:19:9c:f1:cd:e5:26:04:33:c9:44:30:bb:ed:43:c0:48:7f:
         d5:9c:7f:51:7d:47:80:ed:34:5d:35:8f:f1:36:24:c4:ed:9e:
         05:2f:d1:ca:3d:e1:02:d8:b5:6d:e9:9a:0b:fd:61:08:10:e5:
         fd:1a:ac:8e:10:68:db:69:44:bd:ef:a1:f2:52:fb:18:0d:ed:
         1c:91:4c:12:94:b5:f6:31:12:5b:ee:3b:10:36:ea:ec:5f:a5:
         96:7d:33:57:f8:2c:a9:87:dc:ce:dd:c3:78:e3:f5:74:9b:26:
         9f:35:f2:42:3b:61:74:e6:40:12:86:e5:5a:83:a9:8b:e3:77:
         e2:75:62:e9:68:ad:50:52:59:12:20:84:56:7a:fd:f4:dd:bb:
         53:d3:5c:db:b7:17:2f:c0:7e:03:c2:65:4b:ca:27:27:da:cc:
         1c:e7:32:ad:97:79:83:f8:1f:3d:76:c4:d2:43:f8:ef:f0:a5:
         e4:c5:68:4d:f3:ba:71:d2:d4:18:9b:e6:bb:57:dd:b9:d0:af:
         21:19:fd:6f:7d:b5:68:26:99:25:08:a5:63:aa:ab:28:53:4c:
         f6:a1:e7:f2:43:4f:0e:5b:fd:b4:e1:24:3b:e7:7b:c6:14:15:
         d5:d7:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----