Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File:                     PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier:          1l7xlvXsMbhKobFfu/brfuH1hVnVAlcHzmfBhVKMAxU=
Subject key identifier:   DD:A3:82:6F:E8:F9:98:88:0A:39:33:6C:02:50:C6:80:F7:B3:EA:16
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer:       /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial:       01962F0667487C6AD8A235701F9BAB319504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number:          0C64
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
                          2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: swElL0dxGOrsjYBrLbhq/U/b3XMAjSPXxrT19M9LZjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:48:7c:6a:d8:a2:35:70:1f:9b:ab:31:95:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=dda3826fe8f998880a39336c0250c680f7b3ea16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:06:49:c2:f4:0e:01:6e:40:ca:5c:f1:aa:
                    5f:53:73:40:45:16:b9:c6:d2:52:73:a7:56:0b:dd:
                    30:5e:b5:08:69:a7:3c:8d:04:d4:ff:69:04:ec:7d:
                    cf:77:1a:3d:bb:91:20:aa:37:2c:3c:35:4d:66:58:
                    85:34:6b:21:be:4a:71:82:65:f4:91:16:38:57:96:
                    b0:72:00:ac:e9:90:2a:6e:32:c7:59:c8:9c:67:17:
                    d2:7f:7d:df:5c:38:8a:82:eb:e5:88:74:c6:32:f1:
                    01:5c:3c:05:46:3b:8f:a0:e2:1c:3e:73:6c:b1:a2:
                    c4:f8:48:9c:51:72:75:bf:bb:ca:da:02:ea:f3:11:
                    3f:ba:64:c9:b8:d4:8d:04:c6:b4:61:ee:71:94:37:
                    ad:d4:f4:15:eb:72:5b:35:11:53:2b:8b:6c:19:2a:
                    c5:a5:90:c7:93:f0:40:8e:96:e9:9f:2a:be:7f:ed:
                    19:e7:9b:da:18:46:cd:43:bd:1c:f5:91:14:98:45:
                    58:b4:fd:54:15:cb:42:79:ca:92:2c:60:86:2f:e2:
                    91:a1:38:3f:04:62:1c:9c:e5:c6:73:24:f4:f7:09:
                    74:db:c2:4f:e5:12:8c:a0:8e:d0:b7:68:9d:80:f1:
                    73:b0:e7:a2:8a:12:49:12:75:25:e4:c9:29:30:43:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A3:82:6F:E8:F9:98:88:0A:39:33:6C:02:50:C6:80:F7:B3:EA:16
            X509v3 Authority Key Identifier:
                keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:9b:b5:8d:11:4a:bb:a2:62:26:71:cc:90:a4:6a:42:d8:
         40:d5:67:ea:66:77:3d:cf:9a:d6:a7:72:86:40:16:01:ca:7c:
         ac:23:c2:53:92:3d:09:06:e5:61:f0:da:95:a8:0b:69:a7:d2:
         d7:88:ee:57:83:a5:a0:3d:89:e6:1e:e6:f5:4d:81:03:d2:22:
         72:0f:ad:7f:89:6c:b6:c1:bf:df:59:0b:b5:46:7f:a7:1e:ba:
         16:dd:31:fb:45:e7:51:bb:26:04:84:f9:b5:69:2b:cf:ed:61:
         52:51:2b:32:58:e5:79:54:af:cd:9a:b2:4f:5a:36:e1:8d:c7:
         52:c2:76:f7:f3:3d:22:47:f9:de:d1:20:18:c2:eb:fa:f5:0d:
         45:73:e3:0b:c7:2e:a6:ca:14:b8:00:bd:c4:29:9e:ef:ba:4f:
         47:18:de:9f:fe:b1:7b:e8:9b:18:42:a3:3c:cb:ae:fd:d2:ad:
         49:c9:24:3e:9a:96:06:3e:12:1a:95:44:94:6e:b1:c6:30:8b:
         e3:72:c0:b2:d4:2d:b3:9c:78:ad:7f:9c:7b:2b:b1:9f:9d:d4:
         6b:a9:8d:b8:d4:79:f3:ba:f7:6b:52:3a:f7:9b:f5:a3:73:87:
         1b:f0:2f:52:0d:56:53:18:2d:e3:bb:87:d3:21:a6:43:ca:75:
         8a:14:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----