Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File:                     PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier:          GAClaLz8gp+HE0QwnaziRZ6zkZ5WB7ue/LC+y3RyHIA=
Subject key identifier:   06:0E:D3:C8:AE:D5:4A:D2:60:5E:2E:BE:BA:A9:17:BB:96:57:D5:C4
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer:       /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial:       01962F0687A475E7121284D5CBDC19F8BA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: MVHEcvHDmcPul2M9KCc5h0EDIjtHb/4cDIXCOOUcV3w=)
                          2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:87:a4:75:e7:12:12:84:d5:cb:dc:19:f8:ba:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=060ed3c8aed54ad2605e2ebebaa917bb9657d5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:9f:b4:f8:a6:50:50:0d:92:c7:71:e2:d4:
                    19:03:e0:53:ef:01:aa:05:da:26:a5:bc:90:de:52:
                    8c:1d:22:40:af:94:6d:cc:ec:a9:d2:4e:8b:dd:7c:
                    23:3a:66:d5:2b:48:bb:a2:36:1a:63:e8:be:9e:a4:
                    7a:2d:7c:b3:9a:b2:05:0c:03:ac:d2:84:fd:16:1b:
                    3a:31:04:99:b4:83:e7:ed:77:0a:7d:6b:e6:c9:7e:
                    65:ec:66:d5:a4:5e:cf:ae:43:8b:9e:4c:06:d9:e3:
                    3b:0d:fe:5e:7f:7e:59:c3:ae:d7:e0:82:c7:1d:29:
                    c7:22:38:1c:4e:e0:94:18:6d:81:59:53:36:f5:b1:
                    1b:84:94:08:74:ab:04:43:ac:1e:55:b5:e7:3f:fb:
                    ce:8e:76:7c:04:42:5a:a5:69:6b:36:7f:d6:22:9b:
                    9e:d4:2d:c9:8c:38:d6:b7:78:c8:2a:95:9d:4d:94:
                    96:d5:13:5b:ad:ca:25:34:f2:ba:ce:d1:5a:28:6a:
                    bf:9e:09:df:b8:9f:a4:d6:2f:60:6c:82:b8:10:4f:
                    13:d6:18:7b:c2:db:92:96:6b:aa:35:0c:dc:7e:75:
                    91:4a:21:8c:49:32:8b:71:d3:6e:3a:5b:f4:d5:e0:
                    93:82:25:da:55:15:97:93:f3:af:d7:33:79:64:3f:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:D3:C8:AE:D5:4A:D2:60:5E:2E:BE:BA:A9:17:BB:96:57:D5:C4
            X509v3 Authority Key Identifier:
                keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:c8:50:f1:bd:74:52:2a:2a:d1:be:1e:34:c6:2e:6d:2f:
         84:ea:8d:4a:7a:96:70:b0:37:e7:dd:04:96:c3:f6:0b:86:96:
         15:88:e0:0a:af:48:4b:2c:46:97:e6:6d:0f:85:b8:ba:9c:20:
         33:6e:57:38:00:54:ba:6b:06:a6:15:b8:ea:07:b7:58:fe:5d:
         9a:f1:e9:4a:a6:3e:5a:d0:cc:d5:9f:25:8e:52:55:68:5c:8e:
         0b:a7:97:90:af:36:35:c3:db:e3:b1:06:e2:e7:38:af:e1:0e:
         a5:38:08:7d:f7:63:e4:99:78:b1:9e:b5:62:b6:f4:c2:ad:b2:
         21:e1:92:10:b2:b0:1c:a5:3b:a0:8a:46:93:c5:a3:56:d4:ef:
         ed:d0:81:59:82:0f:72:80:52:22:56:42:cb:f7:2c:73:6b:83:
         be:1a:44:ec:66:5d:b4:a7:23:b9:bf:9c:09:b6:cd:8b:1e:c2:
         5a:47:30:08:8a:22:dd:6b:ca:ad:af:1d:b0:a2:c6:1a:16:09:
         8c:53:1a:d9:19:12:44:7a:c4:12:51:75:1d:c5:4e:99:43:e8:
         7c:85:35:32:77:24:b0:94:58:12:67:7b:76:f7:7f:20:0f:5f:
         9c:13:30:de:8f:7e:fe:84:d6:eb:25:e2:8a:50:8d:f0:67:77:
         0a:c8:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----