Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File:                     3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier:          jfJTuVV9qau4kVcuuhr/tUVdfm+S80gyIKrmNVN+TrA=
Subject key identifier:   E6:A5:25:6F:4F:54:8D:EF:DA:FD:42:DF:2A:2B:03:31:65:55:87:3F
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer:       /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial:       01962E2B46270E891CAAE4B2A1158B62F9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number:          0BAE
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: U6toEOXZsSTezYXKfYyHEEvFqCuxgMloSqk6Nrn1X2c=)
                          2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=)
                          3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=)
                          4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=)
                          5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=)
                          6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=)
                          7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=)
                          8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:46:27:0e:89:1c:aa:e4:b2:a1:15:8b:62:f9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=e6a5256f4f548defdafd42df2a2b03316555873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:72:5b:d9:33:6f:3f:1c:cb:2e:25:2f:55:
                    f3:b3:04:f0:9e:a1:80:d4:f1:c3:c9:d8:4a:c6:4a:
                    50:42:dd:74:93:26:65:83:c6:3f:88:f7:5b:f9:02:
                    b8:6d:06:c5:d7:57:49:b9:b4:be:dd:43:74:92:00:
                    05:b0:cb:62:a6:88:26:b6:e6:4c:00:7f:58:f4:de:
                    f1:f4:fb:d1:88:7d:77:9f:f2:03:18:8d:f6:aa:42:
                    94:7e:1c:8e:0b:94:3c:96:cd:31:55:92:ab:4a:93:
                    ae:d0:c7:5c:fd:b8:4c:56:ac:1a:5c:5a:31:bc:5c:
                    24:12:f9:1c:68:81:43:2b:d5:e1:11:d1:4e:3d:54:
                    5c:59:95:56:89:31:bf:0e:46:a4:b0:55:d3:42:d3:
                    32:fe:69:17:f5:e5:ae:0c:12:7f:47:1e:44:17:2d:
                    1f:00:46:1f:9a:ae:2d:47:34:02:b9:92:fa:10:7c:
                    1c:5f:8a:0b:51:fb:8a:0e:60:16:f8:3e:b0:93:cf:
                    b2:ef:bd:35:8d:1f:d5:6a:91:f4:36:0d:e0:b6:90:
                    1e:ad:ae:ca:a0:be:ff:d8:dd:a4:15:d6:e6:6f:99:
                    7e:d3:15:f0:10:18:b3:f7:c2:d9:f9:8f:90:fe:98:
                    cb:20:dd:6b:8a:66:e3:d7:7f:2d:f6:d3:fe:7a:d0:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:25:6F:4F:54:8D:EF:DA:FD:42:DF:2A:2B:03:31:65:55:87:3F
            X509v3 Authority Key Identifier:
                keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:42:7e:80:dd:d5:77:c2:cf:90:ec:f7:7c:87:dc:6e:16:
         11:75:6a:45:a3:7d:f3:45:64:af:0a:ee:cc:03:8c:44:10:eb:
         f7:2f:61:3e:b9:68:00:61:50:97:c9:eb:f2:0a:f7:40:69:7a:
         88:79:39:e7:5e:27:29:2b:39:f9:06:7a:54:18:a3:c8:1b:30:
         d2:48:98:87:f6:d0:35:3e:a7:cc:d1:4b:e3:4c:03:6c:cb:71:
         3d:50:81:f6:a4:20:69:9e:04:fb:c1:79:77:ee:94:dc:bd:76:
         cb:c0:09:49:b8:37:dd:56:8b:47:04:c3:63:05:e5:1d:9d:e2:
         8f:ef:aa:1d:b9:57:1a:77:16:ba:e6:1c:cb:07:6e:ab:46:b4:
         b8:8d:46:af:ea:58:9d:42:66:da:1e:a9:25:9c:9d:db:00:3c:
         9a:ab:4b:ce:4b:e6:99:5f:e1:f6:4d:f3:42:1f:70:c4:be:53:
         67:5e:17:fa:9e:7f:a5:de:2f:ce:e9:89:32:68:ed:36:1d:61:
         f7:61:2b:cf:7d:9a:da:8f:66:25:db:35:10:b5:c5:2b:c2:72:
         af:b2:8f:d4:e1:ef:c6:ab:8f:28:dd:8f:fe:7c:64:ed:b9:44:
         15:87:75:70:11:a0:a2:ea:ef:be:f2:e9:06:5a:82:cd:e1:09:
         7b:fb:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----