Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File:                     PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier:          sxJhg+tgfAFrHfEHDLHmOuxwH8KuKh5iO8Rpo+DqiGk=
Subject key identifier:   8D:97:63:21:1B:84:7A:29:2D:21:54:FE:6E:13:B7:E6:0E:0B:EC:25
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer:       /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial:       01962E985E8CCF364C7077C5A3850121DB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number:          0B97
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 2tgwzeY2PYP3retopansCfxcSo+Frg3VI9kdR2DLeL4=)
                          2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5e:8c:cf:36:4c:70:77:c5:a3:85:01:21:db:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=8d9763211b847a292d2154fe6e13b7e60e0bec25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:58:7f:f4:a8:8a:1f:30:a0:57:2b:42:e5:
                    2d:ef:e4:5d:99:67:1a:2b:28:02:08:a0:7d:55:c6:
                    55:51:f9:59:95:b9:4d:67:ae:ca:fa:4d:a8:a4:aa:
                    be:75:6f:c8:21:09:44:12:d0:99:9e:9f:65:1e:35:
                    21:d0:5b:19:bf:c9:40:f9:5f:c6:52:29:e4:cb:f9:
                    52:22:53:27:a6:cd:82:1d:d2:f9:b7:36:b1:1a:61:
                    f7:18:f6:c2:4d:d6:9b:4f:83:fc:48:f6:b3:ea:c4:
                    6e:5a:2b:42:f3:3c:50:ad:9a:3a:40:df:cb:f2:58:
                    38:e5:e3:36:8a:e9:01:8e:58:e9:8f:a6:74:3a:da:
                    3d:0b:d8:b0:e5:59:79:58:53:3e:43:3e:96:08:97:
                    4e:48:ac:12:21:54:23:80:70:c1:8c:ba:7e:31:28:
                    5a:94:b1:88:8f:a8:25:20:78:92:df:c0:b2:8a:17:
                    dd:94:09:cd:f9:17:24:4d:36:a5:7d:3e:84:90:7e:
                    a2:ae:f7:2b:79:e6:c4:e3:6d:1c:c9:d9:37:68:f9:
                    c9:35:2a:4c:a4:9d:1f:e0:f3:22:9f:05:01:c4:94:
                    4d:64:06:a3:f9:3a:8c:b7:19:db:68:d2:b0:3e:42:
                    40:d6:03:d0:ca:05:f4:50:76:74:a4:cf:46:df:0f:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:63:21:1B:84:7A:29:2D:21:54:FE:6E:13:B7:E6:0E:0B:EC:25
            X509v3 Authority Key Identifier:
                keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:3d:c5:58:ad:18:61:8e:7c:c7:d2:d6:82:10:d3:a6:b8:
         e8:56:f4:ab:cc:eb:bc:d4:96:ac:d0:d6:aa:c7:78:96:d5:ee:
         66:e2:1a:82:d0:90:e4:d7:3e:bb:7a:85:db:0c:49:42:4b:38:
         72:d2:79:63:0c:62:da:37:46:06:79:f7:30:e3:50:ac:c2:e0:
         9c:9f:d8:71:ee:60:4f:6a:0d:ac:c8:b6:f1:78:0a:6e:95:b1:
         bb:a7:ba:7d:61:75:9c:5b:4d:ec:f6:7d:81:63:37:b4:e4:3c:
         ec:bd:2d:6c:94:47:fb:78:9b:81:91:e2:d0:bb:b2:7a:d1:03:
         66:b1:80:79:34:1a:a8:fb:90:e7:d6:73:e0:2e:19:c4:c9:a1:
         ff:96:d1:2d:27:a1:c3:ef:f2:8c:cd:9f:11:cd:5d:85:2e:b8:
         bb:74:f3:30:03:04:85:96:92:0a:37:4b:b4:95:b0:24:2f:2d:
         04:1a:64:e8:c2:52:a3:b7:db:b8:78:ed:bc:14:15:ee:a9:bc:
         74:fc:8a:62:6d:91:e8:4a:10:26:d8:15:e9:8b:c9:c4:08:0c:
         7c:ef:a0:44:a7:c9:42:cd:77:d3:9a:4d:00:a9:33:0d:18:c9:
         7e:04:a5:4b:aa:75:8f:82:c6:22:61:42:88:de:19:2d:7d:53:
         16:a6:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----