Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File:                     a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier:          P1hriEDGKhh67yXepQ7EgG7bwfC9dR34d/eMJJIXwko=
Subject key identifier:   3A:68:A7:6F:53:6E:21:A1:32:6D:7C:75:3F:C7:31:87:DC:DE:DD:F1
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer:       /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial:       01962F071F1174BED7DCE13E33FCF8DF8912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number:          092D
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
                          2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
                          3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: PLHcvDUjXygbkZXMwh+aZYSDgJ/+HiK6A90se7IEjVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:11:74:be:d7:dc:e1:3e:33:fc:f8:df:89:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=3a68a76f536e21a1326d7c753fc73187dcdeddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:12:a0:56:14:fd:a0:08:36:72:62:0f:ee:
                    8c:43:e3:e2:dc:de:18:e5:be:9d:cb:f7:11:a7:41:
                    c6:f0:09:d0:f9:3e:bc:27:90:2a:30:ce:87:55:97:
                    08:c2:7d:3b:43:dc:7f:b8:c5:85:18:ec:c9:ca:1e:
                    ae:e4:b4:ee:d2:5d:b7:54:b4:90:7b:6b:61:a8:b4:
                    59:96:00:a2:76:8c:4e:66:e2:21:65:57:c1:7b:3c:
                    cb:6a:5d:af:9d:35:fc:3b:f0:ae:eb:af:22:77:3d:
                    3d:51:af:4b:59:9a:45:58:66:67:be:31:e3:15:80:
                    6c:90:78:d3:ca:48:5a:62:63:69:cc:6e:c5:96:8d:
                    9d:dc:0e:58:84:c7:76:fb:01:75:70:9b:91:35:00:
                    20:ae:65:57:79:e2:c7:e0:f3:c8:f2:52:2f:3f:6e:
                    db:13:e8:f0:74:cb:dc:3c:2b:09:b7:03:cf:7c:a7:
                    44:9a:cb:0c:cb:c7:22:96:4e:69:44:3b:f9:65:67:
                    f1:99:fd:64:e4:b9:a2:be:35:4c:fc:14:b3:80:be:
                    43:12:2d:0c:61:bd:b4:ef:ae:be:31:a0:58:be:25:
                    cc:46:1e:4b:24:cc:27:29:df:90:71:d0:d7:fc:5e:
                    ec:a4:49:1e:a6:d4:78:31:0e:9b:b4:4b:76:cb:b9:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:68:A7:6F:53:6E:21:A1:32:6D:7C:75:3F:C7:31:87:DC:DE:DD:F1
            X509v3 Authority Key Identifier:
                keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:62:6e:bf:b8:33:bb:e5:73:48:42:bd:df:8f:6b:9d:53:
         66:41:46:a7:42:d5:3c:2f:00:8f:a8:53:d0:dc:e3:38:bc:69:
         35:02:20:d4:18:a4:27:cb:20:b8:5e:18:f4:38:41:58:d7:fd:
         c2:43:cc:86:aa:35:13:03:b2:fb:3f:09:e6:6e:20:3c:de:47:
         21:55:15:2a:00:c5:21:aa:7c:a7:c2:b3:10:00:82:b1:2a:80:
         c5:f6:17:82:d3:c4:43:a0:b0:6e:45:5f:7c:ad:7c:84:76:52:
         49:fc:3f:90:6d:e6:8a:d7:1b:75:eb:12:78:3f:88:53:08:f7:
         03:ca:1e:cb:54:ba:05:9e:5d:84:df:53:30:e0:d6:3c:2f:6b:
         e5:ec:71:b9:74:c3:e4:11:48:f4:aa:cc:03:76:56:ca:55:76:
         e1:2f:2c:ba:2c:cf:70:71:d4:36:82:9b:cf:af:76:bf:e9:42:
         4f:ac:2f:b2:16:c1:b6:e4:7c:f5:32:b7:3e:df:40:d2:9a:12:
         69:c7:ef:1c:5f:42:da:c7:b4:48:29:11:8d:44:92:14:55:8b:
         9b:d6:9a:03:1e:c5:0d:46:88:91:58:0e:cc:00:3f:1f:7f:3b:
         50:9e:e6:7e:67:18:61:4b:1e:42:d7:7f:11:b9:e9:4d:0c:6f:
         75:3d:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----