Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File:                     s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier:          ztzD57a805wveWbsAE7+dOz4AyqvIT2fTEYGHUNq5ro=
Subject key identifier:   74:25:C7:B7:5E:C7:8D:2D:FA:6E:BB:2C:59:E7:DC:40:FA:F4:89:0D
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer:       /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial:       01962E61DB88284705E5F14D33864384FFB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
                          2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: q+TkArq+kwhSgcqznEQr3ov8oxBS9pPkv0SWvM4W1bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:88:28:47:05:e5:f1:4d:33:86:43:84:ff:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=7425c7b75ec78d2dfa6ebb2c59e7dc40faf4890d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:4d:ec:00:7d:91:2c:1f:bb:e9:b4:cb:a3:
                    0c:e3:56:63:2b:76:81:d2:28:80:7c:ce:93:b9:ca:
                    01:90:3b:6d:84:74:a7:6f:4c:2c:b7:27:7f:09:0d:
                    c6:a1:7d:57:4b:59:ba:7d:27:42:b0:cf:a7:df:d3:
                    44:7f:cf:79:81:85:be:80:7c:e4:33:dd:96:56:e1:
                    f6:ab:ed:95:25:d1:47:fb:dc:1f:3f:01:c7:81:c6:
                    a8:af:32:e8:bd:bd:9a:e3:f5:7c:96:5f:5f:72:c8:
                    26:03:4a:89:f1:03:7c:74:b5:69:ed:20:7b:3e:e7:
                    fd:b8:46:58:d0:43:42:8c:91:92:da:0e:42:05:91:
                    2a:99:b9:9e:a8:4e:7e:7d:fe:ab:70:bd:df:8a:29:
                    fa:60:d4:58:38:d8:6f:52:a2:ee:68:09:c6:31:59:
                    12:e4:6a:a6:f0:00:60:4a:16:75:7b:c2:05:3a:00:
                    0c:70:12:66:52:0c:8e:b5:36:42:a5:45:79:be:ce:
                    11:12:7e:31:ed:83:ca:0f:d6:d9:76:bf:70:d6:4a:
                    81:ad:6d:10:df:63:87:0c:6c:39:d0:73:91:df:fa:
                    1d:3e:42:04:c4:2c:69:24:3d:e2:a1:5c:69:60:a7:
                    82:a8:64:c7:f1:14:79:8a:5a:4a:9e:a7:80:ff:43:
                    52:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:C7:B7:5E:C7:8D:2D:FA:6E:BB:2C:59:E7:DC:40:FA:F4:89:0D
            X509v3 Authority Key Identifier:
                keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:30:9d:53:ca:83:c6:8f:68:6d:65:53:9f:21:85:78:6e:
         61:05:21:75:a8:8b:ea:7b:80:60:cb:eb:94:e1:3f:72:24:19:
         d3:27:9c:3d:ce:fc:86:3a:07:58:10:11:55:bd:2b:a6:0b:cb:
         bb:1f:89:e7:f0:c5:b1:be:9c:69:af:ee:ab:71:33:5a:7d:6c:
         d8:f9:92:5a:f2:ba:7b:0d:d0:7e:59:92:d8:f3:e9:66:c0:fa:
         8f:b3:bc:0b:14:ec:3a:13:87:20:ca:cc:76:fd:f9:38:51:5e:
         b7:67:9a:b7:74:f6:37:aa:be:12:fe:62:c9:ad:1f:9b:6c:d3:
         b3:71:5b:2d:04:51:f8:01:ec:ec:14:ca:aa:05:91:5d:7e:08:
         91:ef:4a:63:2d:ac:4d:f1:bb:76:f7:72:55:54:37:59:2e:15:
         89:30:cd:b6:2b:a9:23:06:98:53:3a:84:c6:76:24:cb:ce:c2:
         55:50:37:19:fa:24:bf:ea:0b:ef:14:34:5e:06:00:fb:4a:51:
         77:e5:ad:5a:08:36:6f:a8:7c:32:90:74:31:fa:93:00:26:49:
         33:9d:6e:3f:90:81:91:39:11:16:05:9a:57:ff:1c:f3:b2:30:
         ed:07:f2:03:4e:d0:50:0a:55:a3:81:71:51:71:0e:43:87:2e:
         c6:a9:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----