Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File:                     II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier:          voW692OWM0+9fpsicJM83DwEICli/G+vDsqmzVAL2Uk=
Subject key identifier:   CF:83:AC:BB:7A:B8:57:FB:62:72:18:F1:8D:B1:D7:8F:FB:F1:19:4E
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer:       /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial:       01962F3D47C4717A8EC66D610507B237EB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: RHV/vCf8Zarc+gNNwn9XF69lnX2s59ckIIV1xK2FFdY=)
                          2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
                          3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
                          4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:c4:71:7a:8e:c6:6d:61:05:07:b2:37:eb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=cf83acbb7ab857fb627218f18db1d78ffbf1194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:13:b5:62:c6:ed:9b:2f:e0:96:4f:af:f5:
                    68:22:c2:39:dc:16:42:e0:3e:67:a5:7e:cc:55:c8:
                    c7:69:8e:3c:96:58:ec:33:53:10:31:ef:8d:fa:3a:
                    af:d5:40:e6:04:05:7d:8d:89:4d:40:bd:1e:0e:fc:
                    a7:01:44:1a:ea:30:db:8d:f6:b6:7e:31:14:18:00:
                    e7:20:18:5d:d4:51:5f:eb:bd:bf:fb:24:18:c3:12:
                    6a:d6:c8:bb:12:13:c8:3b:72:05:55:83:8b:2a:66:
                    50:aa:59:65:8e:c3:4c:07:27:a8:a1:e7:76:45:d1:
                    4a:ab:6c:2b:18:47:42:ba:18:25:5a:8d:8f:5e:24:
                    5c:6a:8a:b7:b7:69:53:ae:25:d6:51:e4:d0:b1:30:
                    41:5a:2e:a9:45:42:92:d4:cb:ad:08:4c:a3:24:7e:
                    9b:8c:ba:f7:a2:5e:9b:41:98:a7:7d:36:29:eb:e7:
                    5b:8b:a3:2d:67:c1:31:17:75:d9:dd:7e:ed:58:61:
                    08:63:18:aa:e3:aa:38:a9:17:34:49:cc:0c:ff:e7:
                    c7:71:17:f1:5e:65:94:b9:a0:0b:05:1f:9f:bb:72:
                    01:b4:46:ad:b4:25:98:17:8b:47:e0:ea:ee:21:75:
                    23:60:94:62:a8:66:5d:2b:32:64:a4:c7:4b:d9:14:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:AC:BB:7A:B8:57:FB:62:72:18:F1:8D:B1:D7:8F:FB:F1:19:4E
            X509v3 Authority Key Identifier:
                keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:c4:4b:23:bc:f9:d6:61:b0:8d:ce:d2:a1:fb:44:56:59:
         5d:11:e9:7e:37:8c:0a:55:0b:67:75:63:64:b5:e5:7b:30:b8:
         41:e6:50:d4:13:77:3d:4e:b3:ac:33:2c:82:95:65:cc:a9:fc:
         2f:48:83:ce:e0:a9:1d:6f:91:14:02:f5:dc:07:55:7d:91:d9:
         9d:a2:c9:ed:90:66:81:20:0d:c1:dd:f1:36:d0:da:b8:ed:9f:
         39:48:4c:e2:5a:54:7d:7c:56:bc:38:ec:87:03:b7:42:dd:be:
         33:5f:f2:88:07:60:0b:9a:f2:22:6f:68:6d:1a:e6:ad:e1:a6:
         4f:cd:52:d8:45:fc:ce:12:74:d7:61:fd:5d:f9:ed:9b:6b:5f:
         a3:82:41:96:bc:34:18:33:bc:b0:6d:88:5b:09:e8:e0:21:cc:
         76:c8:5a:af:01:d8:38:68:8e:8e:b0:bb:63:f9:22:d5:40:6b:
         cd:14:d4:cc:91:07:ce:f9:e7:d2:3a:b3:94:2b:3a:92:b1:97:
         b5:95:f1:3a:30:45:75:1b:ae:c0:08:1b:13:ed:a6:d3:8a:3e:
         ad:d4:09:bd:93:1a:7a:50:64:ce:45:e9:9a:0b:c1:bc:d1:27:
         83:cb:6f:5e:ae:93:45:65:c2:91:ff:b2:af:7e:8a:0e:03:81:
         a4:4e:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----