Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File:                     _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier:          Xd+qDhNv+wZtGYqAl09KvaI9IbaVf5vbvcSOTBLzKPE=
Subject key identifier:   5E:D2:99:BC:4F:C7:82:12:84:7F:8A:46:26:10:E7:9A:AA:51:6A:B8
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer:       /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial:       01962E2B13215B4EE8254734E0E7D7A7E7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
                          2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: rr8I4MpajwnkFqxAG2GVIXJFFZXeu41fQutA5oDPzIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:13:21:5b:4e:e8:25:47:34:e0:e7:d7:a7:e7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=5ed299bc4fc78212847f8a462610e79aaa516ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:71:11:1e:b7:ad:88:e7:8a:db:c0:68:29:9f:
                    1d:3b:56:57:bb:60:34:13:79:af:20:2b:57:9a:30:
                    2f:56:b3:e9:d8:3e:ea:97:a7:a4:e0:12:a9:b7:7e:
                    76:72:40:f6:ea:b6:68:d8:a0:df:0b:51:11:52:93:
                    a0:a4:c9:7b:52:d6:75:f2:54:c3:05:25:4d:3f:ec:
                    1c:23:b9:e6:cf:85:a6:41:bf:38:40:33:d6:de:8c:
                    3a:d9:66:e2:4a:cc:04:96:14:a7:5a:26:d7:c5:82:
                    c7:c2:7b:fe:c8:03:0e:9f:ce:cc:0b:bb:b9:95:cf:
                    6d:73:49:6b:a8:4a:a5:f0:3c:e8:f7:82:a8:7e:48:
                    5e:62:58:31:40:91:dc:d3:45:4e:5a:3d:b6:3a:3e:
                    21:75:aa:86:4e:12:d6:b3:cd:38:1f:d9:c2:2a:cc:
                    f8:05:a8:93:b9:5b:ad:b1:3b:e2:12:5d:e8:29:3b:
                    1a:bd:3d:5e:3d:0c:9f:0b:56:53:03:e2:20:bd:b3:
                    62:2b:62:a1:d0:4f:f9:bd:90:99:d6:0d:af:5e:3a:
                    d2:93:32:4e:99:d1:0b:51:e6:82:88:90:38:ef:db:
                    cd:8f:eb:2d:3d:02:68:2a:01:b4:4e:06:99:8d:d8:
                    77:dd:a6:d5:fe:30:eb:04:e9:7e:f2:44:f3:45:38:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:99:BC:4F:C7:82:12:84:7F:8A:46:26:10:E7:9A:AA:51:6A:B8
            X509v3 Authority Key Identifier:
                keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:0b:f2:e3:ee:11:20:90:7a:52:e6:45:1e:dd:cb:42:b0:
         85:ac:47:d2:7d:88:b7:69:37:9b:78:92:0f:ef:b6:79:de:e9:
         28:61:80:db:c4:90:66:fd:0d:0e:a8:8f:17:77:0d:42:91:96:
         13:2a:8b:fd:26:c6:e1:d9:34:f3:fe:71:19:26:53:e1:3b:0b:
         86:1f:24:fa:03:76:75:f1:16:78:18:52:79:60:1c:83:4d:a9:
         1e:d5:66:c6:ec:ae:25:95:80:ed:b0:3f:90:64:5f:48:a2:c6:
         90:08:60:f1:27:b6:bc:7f:cb:f9:b4:3d:05:46:09:de:a6:58:
         19:e3:80:e5:17:75:96:78:af:b5:05:f6:68:a0:99:d9:d0:17:
         ed:fb:2a:90:b7:a9:38:7e:b9:15:23:7a:45:d5:32:54:b9:bc:
         95:f4:69:af:84:f7:7f:f8:39:82:e1:9c:a6:c7:61:bd:d7:91:
         c4:ba:65:c0:34:8f:27:c9:2e:15:c5:e2:3e:8d:5d:fa:5f:f0:
         5a:5b:e9:7b:f4:0f:30:a5:e5:52:a7:b8:fa:71:48:a5:83:43:
         e3:ef:5c:d3:33:87:92:76:32:2c:cc:f6:96:14:0b:4a:e0:63:
         e7:cc:50:e6:59:c6:13:c9:3a:46:d9:2f:0b:49:59:88:12:7e:
         b9:af:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----