Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File:                     b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier:          d8JU9KyeaHjIOvySYLGhhCQEXpjySWSHnHeIzHSG2xM=
Subject key identifier:   E4:6D:34:B2:4A:88:6A:D8:2B:82:5A:9A:82:ED:A1:F1:27:E8:70:CD
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       01962F74E53D01005028C806B62F66348298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number:          0776
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=)
                          2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: //XdQ9fJO7kE/BKfATgsmh/ls8LTid3a2Mb151FXaNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e5:3d:01:00:50:28:c8:06:b6:2f:66:34:82:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=e46d34b24a886ad82b825a9a82eda1f127e870cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:fd:eb:3e:83:7c:df:14:06:05:23:88:3b:
                    81:ab:be:92:dc:75:c9:3e:7e:6c:d5:f0:25:2d:69:
                    a1:17:a9:49:c9:ad:2c:2e:4e:43:80:29:8e:f7:f9:
                    0c:1c:8b:03:7b:66:49:63:9b:f9:e8:42:3c:0c:77:
                    1a:fe:23:f3:01:a9:6c:15:c9:02:82:f8:be:8e:af:
                    09:e7:74:9c:cc:47:b0:23:10:96:6d:25:56:5f:09:
                    30:50:b9:9d:8c:1f:8a:c8:2e:47:9b:8e:f3:52:7b:
                    67:d6:36:cc:da:9d:c4:b4:83:b9:0d:64:ba:9a:33:
                    47:47:b5:cd:f0:e6:d1:c8:16:72:72:73:d7:69:6d:
                    81:b0:09:1a:9d:c2:4f:8e:01:d6:1a:a2:8d:8d:88:
                    06:6f:74:f0:02:50:2b:fb:93:31:7c:2e:52:84:28:
                    da:7f:93:5c:22:d0:3a:ca:70:ee:b5:94:02:2a:d2:
                    33:db:8b:3b:d5:a6:69:64:8f:62:c3:d5:5c:27:ea:
                    69:97:5d:ae:cf:9b:0f:39:55:20:82:69:50:92:87:
                    9a:4d:be:51:ee:0f:e2:c6:83:c7:2b:08:fc:66:05:
                    a9:3c:02:90:26:bf:ca:41:94:bb:66:f1:95:a4:b0:
                    c1:f4:69:7c:e1:51:f6:d8:08:21:87:54:e4:c0:34:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6D:34:B2:4A:88:6A:D8:2B:82:5A:9A:82:ED:A1:F1:27:E8:70:CD
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:20:97:e3:32:53:76:fe:6c:07:85:4c:b1:22:38:d3:6a:37:
         1d:f9:fa:5a:38:f0:a0:80:22:c1:7a:76:90:f2:03:b1:ca:7e:
         36:cd:8f:25:ee:77:54:47:f5:0b:ec:99:24:6c:bc:0c:cb:4d:
         4a:a0:b1:0d:35:d1:31:2f:fa:1c:94:a5:4a:4c:90:59:c9:02:
         9c:71:23:90:08:ad:e7:45:b6:de:e9:7a:ca:b9:b4:81:b7:8c:
         f5:e9:61:9d:da:e0:43:30:be:c3:b5:52:e8:44:ea:12:fd:11:
         64:c5:1e:8b:87:65:d3:52:20:c2:4d:03:94:91:6b:fe:eb:60:
         32:3a:d7:e7:c3:8f:8a:da:70:52:96:ef:56:cf:d0:20:fa:a8:
         81:fe:46:41:80:2d:b8:a1:55:d6:8d:50:a2:f3:15:c2:0c:12:
         a7:7b:c3:8d:14:92:70:77:ee:dd:75:9c:65:40:24:70:ef:06:
         a8:05:40:dd:7b:27:37:4d:4d:14:87:80:bf:1b:fe:0c:e6:d5:
         8c:6a:de:c1:1b:57:f4:8c:53:65:4a:4b:31:ce:80:ee:73:0c:
         06:bc:1d:8b:95:d0:cd:fd:82:b5:66:ca:a1:ea:1f:c1:0a:26:
         c2:1a:66:91:71:59:a0:3b:4e:7f:42:2a:17:fd:2a:68:de:a3:
         aa:53:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----