Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
File:                     P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json)
Hash identifier:          QiM9MD8Htn4LlhxxxZyOLod4Kj+O0Fgk8tHAxk/lhL8=
Subject key identifier:   C2:E4:33:AC:5E:7C:C5:0D:93:90:80:20:1F:09:95:55:20:79:B3:43
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Certificate issuer:       /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial:       01962DF3989AEE03800F1FF7BF7B88A98E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
Manifest number:          150E
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=)
                          2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=)
                          3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=)
                          4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=)
                          5: DHzoXC9jTOUwsYaE5s06DMtz-Us.roa (hash: QoXl4TxQ9Fr8NXV1UyM90LlQ7WV+Ci4+lUpduZFb8Vs=)
                          6: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=)
                          7: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: cg+KTRcEWmnDQJUXmawmosZEUG4xzjch3S9Susnxt+I=)
                          8: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=)
                          9: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=)
                          10: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=)
                          11: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=)
                          12: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=)
                          13: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=)
                          14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=)
                          15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=)
                          16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=)
                          17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:98:9a:ee:03:80:0f:1f:f7:bf:7b:88:a9:8e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=c2e433ac5e7cc50d939080201f0995552079b343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:3f:04:dd:bd:2f:b4:36:ef:ab:15:05:81:
                    6b:4b:4d:1d:59:ec:9e:92:e9:23:51:92:11:06:48:
                    8b:66:cb:4c:f1:9d:80:a3:6d:62:d0:5e:e3:a8:42:
                    f9:c1:a6:e1:c5:ce:61:11:de:91:82:9f:d5:30:a7:
                    c9:19:95:b9:39:25:e4:72:dd:30:49:2a:e8:7f:8a:
                    c9:8f:72:5b:64:99:31:1c:84:cc:b9:f8:99:91:df:
                    51:12:cf:37:9b:63:62:41:18:56:13:1d:bc:a4:9d:
                    25:9b:51:1a:e3:25:7c:99:a4:91:a1:ca:8d:59:ec:
                    bc:0d:00:d4:f7:22:e4:9e:63:f6:97:79:86:8d:11:
                    a7:9c:62:c1:0b:b2:af:bd:6d:00:f2:37:cc:ac:07:
                    5c:4e:09:e3:7e:8c:70:d3:39:70:8a:53:ed:88:dc:
                    b2:98:75:2d:f0:43:52:dd:bd:ee:1b:f0:aa:29:6d:
                    1c:28:4c:09:3f:de:c0:1d:0f:84:4f:a4:45:83:27:
                    45:f5:c4:1a:e3:09:92:c2:3b:10:99:b2:f7:a6:cc:
                    f3:78:7f:03:65:b3:26:7c:eb:9f:7a:a0:1c:b5:0a:
                    80:8b:07:89:1c:2d:3c:54:52:48:b6:b7:15:bd:14:
                    07:7e:b9:62:b9:f6:5d:71:88:7c:a6:4c:b4:5e:67:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:33:AC:5E:7C:C5:0D:93:90:80:20:1F:09:95:55:20:79:B3:43
            X509v3 Authority Key Identifier:
                keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:35:09:5d:ec:94:64:bd:a5:2d:38:36:f7:ea:73:a6:48:
         17:15:9a:30:57:c0:e8:bc:ab:22:ea:45:ac:eb:b0:1a:35:41:
         f0:af:1a:20:65:df:19:29:65:01:64:34:fd:62:31:00:20:24:
         ab:27:75:43:6c:b1:72:6c:04:6b:12:a7:59:52:6d:dd:41:24:
         0e:33:1c:0d:d3:4b:a6:f6:3f:a1:a6:39:2c:23:b7:19:61:70:
         55:38:a0:2a:ef:40:d1:52:fb:e9:68:61:e3:50:be:fd:06:11:
         0b:2f:f3:21:2e:4c:e8:a9:d8:c4:4f:42:5d:26:04:f4:49:62:
         f4:90:69:56:3c:14:81:f1:f9:fd:99:d1:b9:58:b8:56:e6:40:
         3a:d2:e1:1f:52:07:3c:8a:0e:b8:c7:8f:cd:40:f6:65:42:e4:
         de:4b:b6:df:cc:79:ee:1d:61:8e:63:e7:80:82:a2:0e:51:70:
         3c:00:51:ed:ba:5f:14:0b:b8:89:93:39:c0:95:f4:81:22:1d:
         d5:80:c8:de:30:7f:64:cd:02:ea:0b:b8:2c:32:39:e5:a0:a6:
         10:bc:bd:75:eb:12:b6:09:3f:c6:08:ab:a2:f7:06:89:94:88:
         4c:22:fb:4e:97:31:c9:9b:3e:50:57:c9:3d:24:4c:7a:fb:b2:
         67:aa:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----