Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File:                     l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier:          F0PZw7sjwt+r/abMvDlR9jtPgKl9yVCmcgC87wBdvWg=
Subject key identifier:   4C:9A:A1:59:3D:07:52:47:4D:DF:FB:F8:FC:80:4B:A1:73:FC:7E:38
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer:       /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial:       01962F741D46F347026356023FF7E445115E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number:          0698
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
                          2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
                          3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: 33GPVTHQmgV1YmMwUS2FcwFEK2YMJPr06vPllUTgy78=)
                          4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1d:46:f3:47:02:63:56:02:3f:f7:e4:45:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=4c9aa1593d0752474ddffbf8fc804ba173fc7e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:90:c3:28:34:1a:7c:56:6e:4c:53:f4:aa:
                    f9:71:a3:e2:10:84:a1:03:c7:50:cc:f0:26:20:90:
                    b1:cc:5e:d9:3e:16:29:72:bb:c1:24:c7:6d:03:b6:
                    d0:c1:6e:b8:b7:1d:50:31:3b:5c:0d:8e:2b:52:4d:
                    51:7d:89:86:a7:60:c7:7f:8c:2e:29:33:ca:8c:a0:
                    b2:c2:0b:0e:d1:85:84:ec:3e:c9:14:77:8d:dd:47:
                    45:12:ce:92:e3:8a:41:0c:be:1f:3f:79:b0:6b:a2:
                    31:e1:f7:9d:63:29:78:77:27:bd:0d:df:12:33:28:
                    11:7e:b4:92:1e:53:66:36:a2:b9:b4:31:9e:20:1e:
                    d8:15:57:cb:60:af:12:53:cd:ef:51:ed:c8:e3:70:
                    91:1a:b5:fe:28:df:ac:e6:7d:ff:9f:47:0f:a3:83:
                    ca:ea:ae:59:d8:25:8c:06:6e:89:f2:ee:1d:23:2f:
                    c1:da:3c:24:3f:b5:e8:46:b1:3e:13:f4:a6:94:10:
                    17:87:a3:92:4c:98:d3:b8:0c:cf:05:72:1d:43:48:
                    7e:73:b9:db:7a:08:8b:62:32:2d:c2:5d:a9:81:7b:
                    8f:a7:e4:64:30:5d:96:11:a3:4f:b7:a9:ed:bb:42:
                    22:5f:77:a7:cf:07:25:6f:8f:b3:80:22:26:01:ac:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9A:A1:59:3D:07:52:47:4D:DF:FB:F8:FC:80:4B:A1:73:FC:7E:38
            X509v3 Authority Key Identifier:
                keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:04:4b:79:ac:44:a7:52:6f:52:f9:5b:4f:bb:51:52:02:
         69:01:1c:19:31:26:49:f3:d8:1b:ef:35:58:02:a0:eb:ac:63:
         95:47:e6:7c:dc:46:05:f8:fa:68:3a:99:12:22:e5:9b:ab:a0:
         65:6c:ce:09:09:ae:93:20:9c:7a:0e:34:15:8f:2c:f1:b5:b8:
         95:d7:ca:84:ef:ff:1e:31:f2:76:c2:67:6d:5c:0c:02:42:04:
         7f:10:89:6b:36:77:fa:ae:98:98:e9:57:e6:fe:9b:48:fa:65:
         b4:b8:9e:48:85:28:a7:62:c6:3c:ad:25:a8:21:e1:c2:d5:c8:
         3b:ca:5c:cb:c9:4b:f3:ef:49:2b:52:98:da:bc:dd:04:e9:04:
         0d:5d:75:21:12:f4:f4:be:2c:05:32:27:2a:58:e9:d4:46:48:
         16:8c:8e:60:b1:60:e0:51:35:1d:2c:d6:d1:64:7a:6a:42:e4:
         65:54:40:36:3c:31:ac:3c:75:ac:c3:fb:94:bb:9e:43:03:a0:
         48:f7:da:1b:ae:77:88:e4:43:20:fb:99:aa:f0:0e:4f:ee:67:
         d2:d9:17:b8:9f:f8:31:cd:7e:7b:05:5a:c1:2c:94:0e:31:9a:
         ba:83:1f:4c:8b:fb:5e:45:ee:0b:04:5c:95:96:ba:43:23:48:
         53:3f:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----