Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File:                     PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier:          TXAs0meQ8bn5E7ySXpfen1lxIoap0jmyr2Wh12NUcd0=
Subject key identifier:   B5:F1:F5:F4:F4:55:7E:FB:27:CE:22:A3:EF:18:E8:CB:DA:8A:81:71
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer:       /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial:       01962ECFA9FC52ABF2E902A130D2E10B462F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number:          0C5B
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=)
                          2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: w3UvvdKChok81mMFRe+uV8rzEbxbQBM2y87qErHS16c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a9:fc:52:ab:f2:e9:02:a1:30:d2:e1:0b:46:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=b5f1f5f4f4557efb27ce22a3ef18e8cbda8a8171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:33:f5:31:5f:22:5a:e4:bd:6d:5e:94:06:
                    0f:20:b5:e1:32:dd:e1:03:12:bf:c9:3c:df:7e:99:
                    0f:f0:4a:40:ee:df:f2:27:03:b1:9f:29:49:ac:63:
                    cd:58:cc:a8:03:2e:ec:a4:15:35:d3:c6:70:5c:c0:
                    88:69:53:ee:52:a6:47:d4:7c:c0:59:00:7c:73:df:
                    00:0c:40:6f:cf:dd:1a:80:21:11:51:f8:28:ca:ca:
                    74:f5:ba:e6:f6:fd:f7:60:97:47:e8:7f:a5:49:14:
                    7a:2a:e4:47:cc:b0:ec:7c:73:1f:44:c4:a5:01:85:
                    7d:7d:bf:15:f4:46:0a:31:50:be:20:87:3e:e6:a4:
                    3e:76:64:57:a2:56:44:7e:4f:b6:f2:37:70:33:0d:
                    6e:59:93:fe:16:af:fa:f3:4a:de:5a:d6:29:74:92:
                    b3:82:42:bb:9d:94:84:ae:1f:72:10:d4:1e:27:d2:
                    28:25:7c:0e:71:08:da:4d:54:40:3d:98:05:67:c6:
                    b9:bb:16:0c:df:e4:46:e3:d0:3e:2c:3c:ff:ff:ea:
                    31:2a:a5:b8:15:ec:bd:cf:ad:8c:f3:ba:d4:b3:63:
                    ab:6a:b7:f9:c5:4e:7d:b5:8a:d5:03:25:aa:5a:53:
                    da:fe:65:4a:0d:8b:60:52:66:f1:5c:23:ec:9a:cc:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F1:F5:F4:F4:55:7E:FB:27:CE:22:A3:EF:18:E8:CB:DA:8A:81:71
            X509v3 Authority Key Identifier:
                keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:6c:42:ca:1b:de:75:bc:f3:26:ed:2a:2c:e0:c7:fc:9b:
         e4:f3:d0:17:79:eb:3d:01:03:a5:f4:4a:fa:e4:87:00:09:cf:
         54:31:32:44:77:4e:95:cb:23:a0:0f:1e:01:16:90:62:c3:79:
         f8:54:b4:6e:c1:a9:c3:0e:94:dd:58:46:9a:65:57:22:36:44:
         b0:0a:55:c2:df:9f:cf:df:e8:4f:7f:e1:9b:b1:2c:ff:98:72:
         63:9e:6f:3c:1e:a1:fe:fa:ce:2e:e5:02:4d:b8:74:b9:e4:3d:
         78:f0:34:28:0d:74:a1:e7:31:b5:9b:a6:4a:ff:b7:68:7b:3b:
         44:53:18:1a:a5:e8:98:ed:2f:59:89:f4:f1:1c:9c:43:4b:dc:
         58:06:d3:63:f7:5e:b6:85:de:00:a7:1e:64:bc:64:34:a8:db:
         ba:13:94:e6:03:1f:81:37:7f:ef:9d:8b:05:7c:01:22:4f:f9:
         bf:3a:f5:59:e8:81:e9:af:92:a2:8c:da:c5:73:1b:8a:e3:96:
         1d:12:a7:f7:9a:62:f3:55:8f:a5:68:92:bb:5a:d5:4f:15:90:
         9f:d9:e5:0c:99:b3:de:90:3f:00:45:f5:b3:a6:9a:b1:5f:61:
         f9:f6:ea:23:7b:db:34:ee:bc:8f:be:ac:57:41:00:7b:58:f5:
         e8:fb:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----