Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File:                     3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier:          PzVFLk3hr76ENUQp1UIcbIaQI67ZRYMa8ujWRaXSxFk=
Subject key identifier:   06:DE:30:E5:59:3E:58:F5:E7:3D:19:CB:E1:EF:43:44:CB:5C:50:84
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer:       /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial:       01962DF41DDB27F25F1DC881FF52175B752C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number:          05F8
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: Dy7yOLel+YJlXHMOUTJNp7e0byoKo8PGieN9/9CL+Qw=)
                          2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:db:27:f2:5f:1d:c8:81:ff:52:17:5b:75:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=06de30e5593e58f5e73d19cbe1ef4344cb5c5084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:1a:18:39:65:fa:00:b9:cf:9d:dd:67:3a:
                    e3:42:16:60:fb:5f:8c:27:1c:af:4e:0a:c0:21:70:
                    3a:49:1f:1a:ea:5b:13:40:79:9e:12:86:85:c8:15:
                    75:8a:c0:1c:a8:97:58:b3:47:bd:b6:20:3f:54:04:
                    ba:ee:26:9b:bf:fc:37:6b:d3:26:84:84:45:ff:f8:
                    4e:40:49:fd:3d:7d:3a:f6:41:ac:d1:df:b4:ae:2b:
                    27:94:9f:74:ef:c9:d8:94:0f:ad:a4:b5:5b:fa:37:
                    79:5e:3c:a4:5e:2c:f3:a4:14:90:33:c1:1a:3a:a2:
                    35:a5:fa:9b:e3:32:a6:f3:c8:7a:56:78:a8:61:f3:
                    f0:e7:24:e7:4f:7d:c2:ea:c9:69:9e:ed:28:be:0a:
                    d2:8b:c5:8b:49:75:e6:40:d5:26:aa:4c:30:af:c2:
                    28:a9:2b:93:e1:20:5a:33:ac:03:16:f1:18:77:17:
                    82:70:6b:5d:e0:40:3a:ed:20:30:27:9f:22:47:36:
                    44:73:1c:f8:45:4a:cf:d0:6f:b5:fc:da:a4:64:fe:
                    7d:7c:2a:f3:08:e5:c9:e2:da:a8:e1:30:17:0a:e7:
                    c0:c0:20:3d:e8:d2:94:b6:8a:e4:be:37:ca:b4:98:
                    3a:4c:1e:a3:67:0a:93:48:cf:ee:06:03:f3:df:a7:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:30:E5:59:3E:58:F5:E7:3D:19:CB:E1:EF:43:44:CB:5C:50:84
            X509v3 Authority Key Identifier:
                keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:38:df:ac:91:07:3a:a6:5c:0f:a5:9b:fa:df:c4:f5:15:21:
         0b:6d:54:8e:27:b0:5f:6b:41:8c:94:2d:ee:2e:36:60:59:99:
         27:e5:1c:6f:56:f6:bb:2e:77:b2:32:ee:a3:c8:fe:18:dd:d0:
         cd:3c:28:39:f0:f5:95:ef:d1:f9:e2:81:bb:cf:33:3b:c8:53:
         3c:e4:78:10:7e:93:c4:89:91:7c:ee:3e:8e:d9:2d:06:6c:cd:
         6a:09:90:a5:9b:d6:4a:b5:e3:f2:e8:90:d0:26:c3:df:a1:b3:
         c9:d9:d4:7c:04:d6:b9:f5:fe:31:74:81:d0:cb:91:bc:d5:cb:
         a5:ba:1f:23:95:62:f0:54:8d:00:a3:fc:18:8f:3c:59:ac:41:
         f0:5f:10:b2:10:2d:7e:31:ac:bc:f9:20:98:aa:30:98:50:1d:
         7b:93:a0:52:bd:ae:8b:3f:dd:c3:22:d2:17:25:31:d5:1f:c6:
         94:69:c2:11:b7:38:27:bd:b0:c4:3f:84:93:77:7b:24:02:6b:
         69:8d:26:cb:38:6b:20:f1:09:ba:a9:3d:d6:57:6a:4a:f2:20:
         49:4f:c1:17:99:9a:8d:6c:3f:a5:dd:c8:f4:db:8c:79:95:3f:
         9f:8f:4c:bf:2a:7e:ea:fb:c5:c3:e2:a2:09:e6:60:33:6e:20:
         c3:4e:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----