Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File:                     3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier:          bXrlXbErr0bk9/7eoGaRntBicTlq3KJqPwLqG57kU/M=
Subject key identifier:   5B:7E:61:55:C8:D8:CF:DD:1F:EE:73:33:07:C4:29:00:F6:78:95:09
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer:       /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial:       01962F746AB360C63D0AD3D747518FFACF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: gLcEIaY8M5xlVnR49nN3mcemwu1Qj59ibQ2JCPIhh68=)
                          2: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
                          3: nB_zoF-5vRmGl3d9TG824Zcc-nw.roa (hash: m3z2itiLoAbrDtSbjfB2c49btcR+jFaVv3ZdkaLWcmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:b3:60:c6:3d:0a:d3:d7:47:51:8f:fa:cf:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=5b7e6155c8d8cfdd1fee733307c42900f6789509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:22:14:73:a4:58:b4:9b:38:54:c4:d1:f9:
                    93:d1:4f:29:21:02:df:31:d2:44:40:6c:af:77:b5:
                    46:a3:60:d1:d1:cf:b7:7e:f9:71:69:ae:bd:36:c1:
                    fe:83:96:1c:98:81:97:14:8c:9c:99:c6:eb:a2:21:
                    de:21:09:a3:bb:20:06:b9:48:f2:06:a4:f5:cf:00:
                    63:82:94:cc:3f:27:c9:71:10:94:20:5f:0e:e6:08:
                    3c:0a:13:b9:8a:5c:37:a3:52:f4:a1:27:91:63:23:
                    1f:b1:3d:bc:6b:b2:47:5e:47:46:3b:38:c6:6c:55:
                    39:0d:ff:be:74:e1:37:ac:f9:a1:80:4c:4e:89:6d:
                    83:64:f6:42:34:d6:a5:1b:00:8e:0f:9e:68:09:3e:
                    cd:2b:21:91:bb:8a:b4:05:18:6e:d6:bd:9e:20:d7:
                    10:b5:5d:d6:8f:f8:83:c0:30:75:5a:84:22:98:ce:
                    6f:e2:f5:52:31:16:ee:ae:b5:af:d6:8b:1a:3f:73:
                    e1:7c:1f:b3:bb:70:26:62:98:2e:40:a7:66:6a:dc:
                    58:47:71:d3:54:1e:b0:16:f2:d6:f5:e3:5a:b9:fc:
                    3b:f8:79:5a:5d:68:65:1a:08:d6:f6:f9:10:9e:6f:
                    97:2b:98:0b:2e:27:6e:7a:1e:8f:17:d6:4b:79:76:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7E:61:55:C8:D8:CF:DD:1F:EE:73:33:07:C4:29:00:F6:78:95:09
            X509v3 Authority Key Identifier:
                keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:22:65:cd:f0:65:20:ff:cb:c8:b3:cd:f9:66:9c:68:78:53:
         ea:f7:97:ed:2b:ec:ef:05:75:9e:db:1e:43:75:fd:29:13:3c:
         05:3e:f9:20:10:b9:41:d4:c6:42:a1:b0:06:91:56:ed:f0:ce:
         66:90:11:1a:4f:b5:b9:05:52:6e:f5:23:48:05:43:1b:a9:e1:
         0d:a1:a6:6f:cb:1a:18:30:41:b5:ae:89:98:77:99:0c:f3:a7:
         a8:09:e2:70:85:4b:59:76:b4:89:8e:62:0e:41:cf:6f:c2:3e:
         bc:8e:0e:06:41:ab:8c:91:34:91:0d:3f:a0:a5:7d:37:30:ed:
         75:16:3c:81:63:e3:8d:cb:6a:31:8e:8f:d3:41:cd:af:0a:41:
         5d:f3:28:7b:53:9e:68:10:30:20:6b:46:dd:e6:e1:7f:31:53:
         6f:4f:ac:0e:78:ff:1c:5f:1b:69:b3:bf:0c:1b:53:9b:08:17:
         bb:3a:db:2e:63:2d:7b:eb:02:d8:3f:28:fa:c0:38:94:78:96:
         8f:1e:e6:2a:a1:c4:fb:0d:cc:db:79:39:fe:32:f1:23:f5:19:
         cb:5b:6c:d3:59:c9:df:9e:d0:46:50:ac:db:dc:81:f2:f0:40:
         41:af:33:12:84:21:1c:84:ad:96:1c:63:80:36:b7:df:ad:02:
         0d:45:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----