Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File:                     3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier:          MlkPMjbq5WLrjLHQ/nEmoxGGvFxGD5jJ+PbDin3g9HM=
Subject key identifier:   1F:9B:D3:E5:5F:45:CB:90:9D:CE:59:71:95:53:8B:BC:55:2B:4D:4D
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer:       /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial:       01962DF3EC09A7361113E4C2BF364F234CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number:          0B44
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: 4DLYkDBk4MmwAA95vVvqeLPRmUNnuuLpB/mLpENmpi4=)
                          2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ec:09:a7:36:11:13:e4:c2:bf:36:4f:23:4c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=1f9bd3e55f45cb909dce597195538bbc552b4d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:6d:da:67:ba:93:d5:ea:c3:cd:3e:c0:79:
                    52:64:c3:aa:34:15:a4:46:a7:ae:6e:98:a2:5b:4c:
                    e0:79:f1:dd:48:0d:e4:d6:c4:02:ec:82:93:0a:0d:
                    c3:4b:c1:f0:4a:8d:c9:2a:c3:52:08:f5:bb:ff:80:
                    ba:64:4d:3e:c1:f3:94:fe:01:14:e0:c5:ad:8f:00:
                    ae:10:97:bc:89:7d:95:e2:ea:c3:15:29:f2:7b:6e:
                    c6:58:3c:e5:a5:4f:36:64:11:c8:70:93:1c:7a:7a:
                    4c:55:a5:11:5a:5c:22:69:b4:b5:6a:e1:b0:aa:4c:
                    4b:01:68:91:d5:34:4b:c2:cd:2b:ad:29:23:ad:99:
                    18:d4:24:6b:cf:5c:9d:fd:8f:12:d4:23:dd:19:5b:
                    39:0e:f5:30:d0:4c:d7:9f:05:ac:66:9b:a6:c7:84:
                    47:31:9d:3d:cb:e5:8a:52:93:84:99:ba:b1:42:18:
                    5c:65:45:02:ad:91:79:3b:b5:80:bb:b5:c7:d2:e4:
                    0c:ca:d7:65:44:75:3a:a0:b2:1b:14:97:b0:af:38:
                    64:75:6b:59:07:4c:58:c9:5b:eb:8c:59:f2:02:a4:
                    74:6b:38:3a:6c:26:1c:23:3c:4f:ac:f0:ff:8b:3f:
                    60:16:52:bc:75:43:bc:ea:7e:66:ae:6d:2f:92:dd:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:D3:E5:5F:45:CB:90:9D:CE:59:71:95:53:8B:BC:55:2B:4D:4D
            X509v3 Authority Key Identifier:
                keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:b1:df:4d:c5:9f:1f:3b:7b:4e:8a:c9:5c:d4:74:00:fb:
         9f:a6:e9:61:e0:0e:32:61:1f:a0:c3:3d:5b:11:41:a2:48:66:
         59:e9:aa:36:bb:1d:e2:9e:49:b3:14:fa:d2:10:4d:e4:ea:38:
         34:7b:41:0a:e5:6b:dc:13:b5:2f:fc:1a:a1:3d:62:a0:c3:05:
         5c:b9:63:74:98:bb:84:8c:08:d5:44:37:dd:94:32:b3:e6:bd:
         78:c4:c0:6b:72:5f:21:c8:d0:8a:e3:ba:b7:e9:1a:f4:fd:0d:
         1e:18:04:7e:80:1a:9d:f5:79:bc:90:fd:71:cc:8d:64:00:21:
         db:6b:94:6c:ba:55:25:00:82:ce:86:ed:81:10:1d:d9:63:42:
         fb:8c:35:94:a0:e2:ab:47:4e:d2:41:9b:53:b1:6a:6a:43:15:
         42:f8:c6:f6:e8:aa:6a:7a:d8:78:db:38:c0:63:60:c2:a2:aa:
         28:72:fa:06:7f:f1:4b:80:03:ac:b3:2a:88:d5:24:f1:35:09:
         ff:48:d8:ac:01:e9:ab:f4:66:a0:9c:3d:56:a4:0d:18:d6:ea:
         ac:e1:50:e4:ed:cd:40:ce:cd:95:8a:21:c6:2d:ab:20:cd:55:
         ef:10:72:86:73:b4:81:81:55:27:f5:fc:4e:d5:3d:6f:dc:d2:
         e8:21:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----