Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
File:                     1PhqmjxCnBvCbsBqOuTkF8p0394.mft (raw, json)
Hash identifier:          pQgf1ZK+E1M3Rxz/fiKszN/3C/oxu8y9Au+MSNCKG+g=
Subject key identifier:   3E:C5:8C:49:DB:91:9D:A2:3B:EE:6E:18:F6:A2:77:7B:9E:C2:9D:9D
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Certificate issuer:       /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial:       01962F742E3353C69EF7795ED1445F0E9AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
Manifest number:          0772
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 1PhqmjxCnBvCbsBqOuTkF8p0394.crl (hash: qE6MZyvfKLbYVvwkVVwuIbcobEVLy6dF/9fXHPx8GNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2e:33:53:c6:9e:f7:79:5e:d1:44:5f:0e:9a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=3ec58c49db919da23bee6e18f6a2777b9ec29d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:86:a6:d2:0a:a5:88:b1:3b:53:0c:0d:48:
                    ca:41:be:b1:4c:b2:e1:e6:69:1a:fe:3b:1e:d7:03:
                    51:9e:64:68:73:c3:a1:db:af:c6:ec:c3:f8:57:c6:
                    1f:a5:47:7d:e9:b0:ca:8a:19:85:84:04:dc:23:6f:
                    af:9c:45:8a:3f:af:b0:7f:52:e6:45:d5:0d:8f:96:
                    c0:5b:4b:28:87:a2:5b:d7:0d:32:ec:e0:af:e1:5e:
                    71:fb:a4:53:90:b2:bb:86:08:1d:bf:1a:3a:55:ee:
                    75:a2:93:0c:6b:2a:e1:93:10:a7:59:6e:ab:fa:e0:
                    6f:3b:7e:03:a2:ac:ef:fc:a7:60:be:80:c0:a7:e8:
                    f4:f8:5d:90:c5:72:ba:9e:35:80:31:b1:ab:d3:5a:
                    43:42:49:d2:74:c3:d1:e9:10:eb:b1:92:de:0c:b1:
                    3b:c1:9d:de:8a:84:83:06:4c:ee:5d:6d:3c:46:e9:
                    3d:f6:0b:6f:3d:e2:eb:f9:71:ba:5c:0a:65:04:3b:
                    d3:88:62:6a:a0:f1:c4:2a:4d:db:f0:52:ac:a9:ef:
                    27:25:5d:e4:0e:f1:4a:10:84:de:44:63:ee:5b:d3:
                    9c:92:42:5c:df:07:4f:ec:b3:67:c2:fa:37:72:27:
                    26:52:1b:fe:86:c5:73:4e:83:8e:33:ef:db:7a:fb:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:8C:49:DB:91:9D:A2:3B:EE:6E:18:F6:A2:77:7B:9E:C2:9D:9D
            X509v3 Authority Key Identifier:
                keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:21:db:97:d7:74:ce:8e:03:3b:37:9e:72:1d:ee:32:6d:cc:
         94:1a:b2:e6:83:56:ca:03:3c:a0:53:a1:86:12:7b:02:0e:cd:
         98:f2:93:11:3d:f6:dd:a1:7e:a0:ea:d5:e7:37:f3:cd:0c:72:
         a5:cd:14:9f:2b:cf:a7:68:7e:42:cd:77:1e:da:26:07:90:9f:
         2c:18:ab:94:09:19:39:40:3f:38:96:b3:04:fc:c6:b1:33:59:
         94:7a:c8:39:56:49:f6:81:59:a1:d6:e9:47:75:32:df:a7:a1:
         c1:0b:53:34:5a:17:f3:de:98:c1:da:cf:ae:44:4d:f3:a1:1d:
         26:88:6a:e3:c7:d1:51:cc:9b:d3:5c:4f:71:b4:f1:18:d9:8b:
         aa:df:9f:67:7e:a0:88:b2:60:a6:79:b6:6f:a5:dc:2f:e8:a8:
         2c:08:35:a9:6e:36:3e:e7:9e:2d:b0:95:7f:56:99:82:22:fc:
         da:b5:ef:aa:18:d6:72:a0:f8:fd:cd:4f:08:c2:c4:59:ce:01:
         c4:bb:c5:90:e2:1e:f3:a9:67:f9:a0:68:43:99:b8:c6:7b:b0:
         ad:d2:06:15:22:2f:c5:96:f6:19:45:5c:08:09:64:3d:83:93:
         20:4a:c7:13:fb:1d:6c:99:ee:59:fb:9c:44:cc:a4:ec:a6:7b:
         59:28:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----