Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File:                     PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier:          kbmujQJ+7+gMsbftVCC+Oly9xytBXeVRxjKEonF/sDs=
Subject key identifier:   3E:F3:52:C5:6F:A0:34:2A:65:22:36:4A:86:F3:87:EE:0D:86:40:DA
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer:       /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial:       01962DF3CD82A8225DA354807238CBE7DD3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: bGR2yuPqjaUgehplAI2kJooEnQf9TUo+bEsn02ntYjg=)
                          2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cd:82:a8:22:5d:a3:54:80:72:38:cb:e7:dd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=3ef352c56fa0342a6522364a86f387ee0d8640da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:68:e3:11:ed:85:38:34:c0:d6:b3:64:5f:
                    dc:73:b9:b2:75:49:05:ee:ce:f6:e4:2f:70:41:91:
                    7c:c9:80:13:1d:a8:02:b5:32:e5:1c:b5:bf:06:a8:
                    c9:19:2e:c0:0b:46:f4:2f:44:dd:d8:f5:5b:11:02:
                    d8:d7:c6:17:35:2f:a8:44:ad:15:5b:a5:c2:9d:b8:
                    4e:0d:a9:06:23:c1:45:26:cd:fb:42:1e:0b:d1:d0:
                    5f:03:e7:27:50:2d:4c:72:51:db:98:9a:5a:62:8c:
                    c1:96:fa:9a:dd:9a:76:f7:f3:e5:10:27:bf:91:2e:
                    4d:ae:48:fa:b2:59:1e:32:2f:85:64:81:86:93:c6:
                    9f:2d:2c:30:2f:ce:dc:30:5a:6d:a4:13:4d:0f:b3:
                    f3:91:4a:62:9d:c8:0d:fd:41:79:6e:09:9f:ee:f7:
                    62:d9:b5:39:54:34:ae:b7:d4:7e:29:e2:f4:80:3c:
                    d1:a4:1f:da:ff:66:70:60:8f:98:e5:a4:3e:c4:39:
                    98:ce:22:2b:51:85:fc:cc:98:8f:29:67:7b:85:82:
                    06:19:99:4c:d0:fd:67:81:21:c4:5e:13:f9:96:f7:
                    19:6d:24:7d:e4:d0:af:e7:a9:e1:22:84:5e:34:5b:
                    7c:ff:5a:75:8c:5e:79:d7:62:55:81:90:65:b7:ba:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:52:C5:6F:A0:34:2A:65:22:36:4A:86:F3:87:EE:0D:86:40:DA
            X509v3 Authority Key Identifier:
                keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:24:9a:c5:08:70:23:65:29:b7:87:d2:18:f5:d8:bb:5e:
         f8:45:b9:5c:84:57:ca:57:19:ce:bd:64:f5:0c:a0:10:3b:59:
         b4:f3:04:e3:f3:f2:cf:d5:78:fd:b9:31:70:75:f0:a8:3e:e7:
         8e:03:51:df:c9:e3:96:b9:5e:df:27:fc:a3:cc:7e:e1:48:0b:
         53:09:71:b8:ab:ca:83:19:58:86:41:6a:c5:4e:e1:2f:46:1a:
         96:cf:54:00:f6:a0:9c:f3:a2:a3:70:10:a1:a2:46:9d:d4:b1:
         10:39:98:f2:67:e6:2e:27:4c:ef:cc:0a:c3:2f:e4:44:9e:de:
         bb:a7:37:65:f4:a0:15:1e:b8:50:73:33:ce:a6:69:6e:ab:b7:
         75:bf:e2:42:03:d7:8e:52:10:d6:f8:34:fc:f1:f2:8b:b4:bd:
         cf:82:95:fd:34:cb:3c:8c:19:0a:13:93:d3:3a:af:8b:70:17:
         31:72:0f:ce:fd:61:34:5b:6d:1f:50:86:83:39:54:5e:b4:52:
         03:45:22:1f:fe:64:4e:42:16:6d:3d:f9:11:31:0c:b4:d7:8a:
         d9:f6:b0:d8:c0:b4:3f:49:84:a0:a3:4c:ae:b9:38:25:16:33:
         43:bc:15:b6:d0:bc:6b:05:11:6b:7b:3a:72:5c:6c:92:dc:e6:
         65:75:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----