Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File:                     P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier:          /hMe4sv8BWBePDNFUaEVXRWdDeW5NJasewS1q9+apS0=
Subject key identifier:   70:8D:51:D7:70:16:20:33:84:15:7E:E4:39:AF:5D:78:77:9D:1C:18
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer:       /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial:       01962E2ACE0E5F9F73B95A3E13E9896B8781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: vlWfLN1MN8N6i81oPW2MXyjMdrdqJrqTeT+1DB9vuvA=)
                          2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:0e:5f:9f:73:b9:5a:3e:13:e9:89:6b:87:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=708d51d77016203384157ee439af5d78779d1c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:c1:de:66:0f:c3:94:f5:bd:a7:c7:82:58:
                    ba:1a:df:23:96:f1:27:9f:f3:9f:d6:03:02:0e:f9:
                    9d:6e:94:2a:8d:67:bb:cb:d2:94:cd:14:d0:0e:e6:
                    3e:56:f4:93:25:d9:3d:c5:94:a3:b1:a5:c6:e4:37:
                    59:fa:d4:66:c3:2c:24:ab:13:c8:c0:78:e1:66:82:
                    57:e5:97:98:b7:f9:24:71:f6:1c:41:61:60:8a:5f:
                    d0:b4:30:0b:0a:96:c0:e8:64:d7:be:1b:65:de:22:
                    fd:3c:16:b1:86:35:7c:40:66:d5:5b:a2:f5:bb:6e:
                    97:21:b1:79:37:14:cc:3f:e7:0c:3d:61:36:cc:ef:
                    69:81:7f:c7:fe:84:e0:f6:96:be:df:75:a3:4a:8a:
                    aa:92:3e:90:4f:96:dd:66:cb:fb:91:de:6f:47:9d:
                    74:c6:b7:56:95:54:66:3c:f6:b9:aa:47:3b:9c:db:
                    b2:aa:36:37:55:8b:c6:d4:d3:a9:db:51:00:0a:9c:
                    11:ea:0a:a2:21:d3:b1:69:82:db:20:33:ea:d9:4a:
                    83:2a:98:ab:1c:36:ff:64:dc:f5:fe:67:f8:8f:2d:
                    86:b3:bc:b3:81:62:43:6c:94:a0:a0:a8:bd:d3:d4:
                    be:c7:ba:49:37:b7:24:b2:ad:e7:8a:b7:19:72:3c:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8D:51:D7:70:16:20:33:84:15:7E:E4:39:AF:5D:78:77:9D:1C:18
            X509v3 Authority Key Identifier:
                keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:59:23:50:be:f1:04:3d:15:ba:4e:e4:3f:84:f2:d8:d0:15:
         0a:29:2d:2f:ab:81:8b:3e:49:b8:40:36:30:d5:f4:cc:c8:24:
         d0:b6:30:8d:6c:4b:06:41:8e:55:a9:0c:04:23:d4:da:31:d6:
         d9:8e:70:96:c1:83:7d:67:ad:98:90:4c:b3:c9:94:48:25:ba:
         b9:73:4e:c4:11:dd:94:2b:82:c0:bf:48:16:46:37:08:72:9b:
         55:04:90:5d:7d:ca:e8:52:89:29:9d:aa:fa:86:b7:cf:4d:da:
         80:4b:ce:94:06:48:39:f9:fb:9a:27:51:b3:23:b9:9e:5a:6e:
         87:2e:07:d6:bb:47:f6:a4:a9:e0:01:7c:db:82:3b:ad:7c:a7:
         41:d0:8f:d5:b8:4a:66:49:5f:5f:8c:df:4e:36:3b:6e:b8:bb:
         33:34:a5:1d:f9:91:02:85:20:17:1e:8e:df:91:fd:71:5a:08:
         f7:02:99:1b:b6:0f:75:bf:3e:42:7c:2a:85:2b:82:1e:22:e9:
         ce:b2:13:e9:7e:04:21:f8:30:2f:46:ed:c7:00:9b:6b:21:42:
         15:d0:e0:7a:40:30:64:80:37:29:e3:6f:43:57:43:11:2c:e0:
         89:f4:ad:f3:76:46:41:42:8d:8d:cc:a8:30:29:c6:c3:6f:48:
         d3:85:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----