Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File:                     PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier:          bQVP6kLVw2NyuO9kqCDjCBfkCAB/h/hQ5u0L9rLSd70=
Subject key identifier:   F9:6E:7C:73:6B:14:60:FE:EE:C4:B1:25:A1:C1:51:C9:FF:B2:B2:5C
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer:       /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial:       01962F06787888E31938E93BEA0EFB011AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number:          02EF
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=)
                          2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: hLLZqo/qSq+cnFacCm7RcZ84gyGRhHNGNoHOWErEd8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:78:78:88:e3:19:38:e9:3b:ea:0e:fb:01:1a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=f96e7c736b1460feeec4b125a1c151c9ffb2b25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:c3:f9:35:2f:2f:d1:bb:06:e1:9d:36:95:
                    49:0f:c6:8a:d5:72:fc:ec:4e:90:ae:82:c3:c5:20:
                    3b:80:73:51:34:3a:5c:78:e4:8a:16:b3:7a:39:45:
                    e9:45:c3:51:a6:e8:82:cb:87:2d:7d:f7:79:de:2b:
                    89:5c:cf:03:86:99:92:a1:00:63:a5:76:99:a0:f3:
                    20:eb:3b:8c:40:5b:ae:f8:cf:64:e6:e1:29:54:78:
                    42:f0:3d:4b:c1:5d:8c:33:13:d8:79:70:2c:f2:ab:
                    b8:fa:47:56:c1:08:9c:91:63:d7:61:c6:90:14:c9:
                    52:54:bf:7b:f0:03:34:55:ab:1d:4a:9d:9e:cd:fd:
                    9f:01:50:e6:66:07:37:86:d1:04:fc:57:0a:1d:be:
                    1e:94:81:1b:60:58:fe:5a:7b:13:ad:af:ea:21:3b:
                    91:86:a8:de:6b:7e:ea:04:4d:e3:c8:3d:08:e2:ec:
                    fc:6e:19:55:04:6d:3d:2e:44:c0:15:61:5e:06:44:
                    af:95:8f:fb:7f:04:7a:95:40:cd:be:65:c8:6d:7f:
                    df:91:43:64:a2:81:bb:d5:4b:32:f0:3c:8f:56:97:
                    80:12:84:e8:44:69:26:97:25:54:99:8b:5b:f8:ca:
                    96:47:66:5c:3a:0f:1a:92:52:41:83:e7:49:2d:4c:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6E:7C:73:6B:14:60:FE:EE:C4:B1:25:A1:C1:51:C9:FF:B2:B2:5C
            X509v3 Authority Key Identifier:
                keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:0f:09:54:1d:00:1b:4b:3b:8a:7d:24:6a:0c:0b:eb:76:
         1c:ed:7e:0c:5a:b9:17:27:7d:54:4e:ed:2d:f3:28:92:13:d3:
         d2:84:f2:be:e8:20:39:23:2c:c2:36:df:60:fb:20:7e:4f:ab:
         62:29:91:be:1b:00:98:a7:4c:2f:d6:a3:25:4a:45:4f:1c:d3:
         63:7e:c6:6f:72:47:32:8a:c4:a0:0c:66:1b:8f:4b:e1:49:3c:
         62:d6:0a:7c:c2:0c:ea:46:50:24:76:62:e6:db:ac:c5:b8:a3:
         78:48:c6:6c:f2:55:7c:1d:8d:1a:28:a9:4c:d1:03:76:fe:80:
         43:5c:33:07:4f:94:f9:91:b7:65:f8:8d:d5:a4:9a:51:bb:84:
         b7:e3:e3:8f:d9:90:cd:bc:94:e8:f1:ca:5d:ab:cf:ac:ea:4f:
         84:b8:1c:ba:bc:75:5a:e5:f0:24:34:42:38:77:a4:fb:f8:a7:
         17:20:b0:48:d1:91:7a:04:a3:82:a3:85:e5:8f:86:57:8e:85:
         3f:af:da:03:49:dc:ee:b9:fb:ec:4b:ea:62:16:96:e6:7d:73:
         8e:6e:0e:dd:e6:b0:c7:4c:e4:7e:08:19:9f:fd:0e:6a:2f:d2:
         2e:07:1d:a5:df:03:9c:ac:77:7d:19:6b:97:73:2f:db:5c:b9:
         6f:9d:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----