Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File:                     PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier:          ApelxTG7IRFWXEKedTnztcoawTQ2Hrywjxa9f7jLRos=
Subject key identifier:   6A:BC:8B:13:35:9B:3C:CC:DB:2D:55:72:B6:16:EE:E4:DD:A0:C2:4C
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer:       /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial:       01962F3DA4FF47CFF2A0686C243E8740BA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number:          03CA
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: xLUqGWWekwmWUBjqXGcIVwUZYbUf5OetceDbh5TNaZM=)
                          2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
                          3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:ff:47:cf:f2:a0:68:6c:24:3e:87:40:ba:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=6abc8b13359b3cccdb2d5572b616eee4dda0c24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:7b:b5:94:69:ed:15:d8:5e:aa:69:45:0d:
                    01:b9:a0:c9:36:44:83:b5:12:f0:17:8d:33:55:59:
                    3d:04:50:e7:13:a0:ce:d0:4b:74:8e:a0:b4:2a:9a:
                    53:44:a0:3e:c8:5d:29:f9:02:83:0e:e9:9e:21:82:
                    b2:7c:46:b3:46:18:f2:97:63:aa:79:a9:2d:11:a2:
                    bb:c6:c7:ab:91:66:77:a2:79:a7:be:34:7a:7c:62:
                    da:76:6e:1e:46:26:c8:32:be:61:87:ec:24:ae:f7:
                    f9:de:3d:81:23:86:1f:42:d7:58:37:53:59:33:11:
                    6a:14:2f:06:ba:81:0c:27:31:48:ef:b0:e0:1d:8e:
                    f0:b9:3f:c7:ab:0f:03:ff:22:c0:ee:79:d4:9c:cc:
                    5a:e9:00:da:bb:95:13:0e:1b:29:67:1c:f9:30:13:
                    a8:68:95:be:90:13:a1:0f:6b:44:3b:ad:36:d6:96:
                    12:03:f6:35:fe:df:91:86:de:b8:92:21:d2:a1:9f:
                    35:19:20:42:8b:0e:4e:c0:e6:50:0b:ba:e7:56:6d:
                    27:26:a8:cd:9d:78:74:44:51:60:89:bf:65:dd:2b:
                    fa:0c:f7:9c:d6:d8:0c:d7:03:5b:8b:e6:d7:ad:02:
                    41:95:f6:3e:38:f7:2f:45:7c:71:79:3d:39:8d:78:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BC:8B:13:35:9B:3C:CC:DB:2D:55:72:B6:16:EE:E4:DD:A0:C2:4C
            X509v3 Authority Key Identifier:
                keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:57:eb:41:0a:20:03:52:46:ce:dc:72:99:dd:ec:82:48:ce:
         55:74:f1:72:6b:d5:12:b1:84:c6:2d:f4:8a:f0:51:e7:4d:a2:
         a8:18:e9:51:0b:fd:ff:6f:b6:e8:1d:f1:c4:4a:e6:3c:d4:69:
         90:ed:dd:72:c8:d1:6f:f0:ba:27:60:a3:b8:f7:4d:0a:55:f5:
         f3:a7:05:b5:c2:9a:05:3d:ce:26:6b:15:ff:cd:3b:84:e7:a1:
         7c:20:58:62:34:f0:a6:64:ae:97:5f:b7:ba:2b:5b:4c:34:46:
         31:01:2e:3f:2e:84:9d:9c:0b:3d:40:a0:8c:23:b3:8c:df:b6:
         79:a5:32:ce:2b:bd:bf:85:32:ce:e2:87:3e:c2:59:47:f6:96:
         f3:04:6d:a4:f1:68:84:fd:68:27:61:fc:29:5f:7b:88:b8:b8:
         94:c6:14:57:51:6d:09:20:29:93:9e:e9:a3:f0:bc:0d:e8:9d:
         84:50:df:4e:0d:c4:8c:bd:7c:02:69:af:f4:2a:4b:b1:56:ea:
         3d:90:27:58:75:3e:cb:08:d9:50:c9:59:74:c6:2c:b4:49:1b:
         b4:cb:c9:dc:46:43:6d:70:91:0d:a9:85:49:07:75:eb:1d:04:
         88:3c:43:32:eb:04:90:e4:19:68:4a:e8:83:25:b1:d3:3a:ff:
         0e:8c:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----