Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File:                     PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier:          lBXO5O6Pu3T2g8KdF3J9ttbLgZpt3Yt4geHuFMp2xKw=
Subject key identifier:   3E:BE:3A:11:9A:58:09:C0:BF:47:84:D1:1F:41:2A:65:8A:5B:D3:FF
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer:       /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial:       01962F74EFC519A9D3B2E559B8BF8A5C6211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
                          2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: elnaFG1OrH2TYbyoa2I9t+ejBz6VGP7AdTt6h1EL9co=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ef:c5:19:a9:d3:b2:e5:59:b8:bf:8a:5c:62:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=3ebe3a119a5809c0bf4784d11f412a658a5bd3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:37:80:9c:80:1b:56:a0:6f:52:6d:6a:f8:
                    b5:41:7a:34:65:11:2e:29:55:c9:e1:47:16:31:4b:
                    cd:3f:64:05:6e:05:73:59:5a:78:7c:e3:fc:84:f5:
                    8c:a3:66:83:b2:2c:cf:9a:24:de:38:82:62:92:e1:
                    96:68:72:1f:a0:be:79:fb:db:62:8b:ed:5a:ec:e2:
                    a8:46:c4:f5:92:95:92:37:f8:52:bf:bf:d9:4b:96:
                    3b:28:37:02:81:7d:38:c5:4e:43:66:5e:f6:8f:44:
                    3b:a1:26:a9:c8:6f:12:8c:3d:fd:b7:ef:d0:b6:5d:
                    d2:62:37:d6:c9:57:03:a0:33:ed:08:a2:46:f8:ff:
                    f8:ca:83:00:4b:2e:c1:de:e2:0b:de:5d:80:88:f5:
                    49:a1:26:be:91:5e:e3:a5:a5:3a:17:7b:20:30:83:
                    87:41:eb:d6:61:0c:9a:f8:aa:f2:65:0d:ab:0e:6f:
                    f8:79:a2:b8:2f:f4:bc:b9:fc:54:b8:d6:90:fe:77:
                    bf:e3:f6:e7:c8:15:f0:d7:6f:2e:e8:dc:a7:c4:91:
                    6f:ba:28:bc:9f:39:7b:cc:49:ac:f4:6d:17:41:db:
                    d8:31:e8:6b:5a:aa:05:b8:29:f2:f8:e0:f6:1f:6d:
                    b5:a5:15:63:34:c1:00:1b:f1:98:7e:4a:70:58:33:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:3A:11:9A:58:09:C0:BF:47:84:D1:1F:41:2A:65:8A:5B:D3:FF
            X509v3 Authority Key Identifier:
                keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:98:9c:6c:65:58:d2:c0:33:28:54:05:de:f7:8a:4b:5f:
         80:14:9a:ea:fa:eb:68:9d:00:e4:75:b8:22:1e:e7:bd:e7:92:
         cd:60:b7:be:d3:a7:0e:f3:ab:89:50:91:e4:5c:77:0a:2d:e7:
         6d:b9:66:4c:c9:ad:c2:4b:bc:79:a5:74:6e:dc:fe:96:bb:a1:
         26:95:99:58:f9:ed:26:30:bc:25:3d:bc:d5:59:0a:1a:7c:4b:
         28:a8:e2:c2:d5:1d:5d:60:06:67:94:08:b6:41:1a:32:70:51:
         2a:23:83:12:92:82:52:c4:e9:82:ed:9c:7f:46:d9:08:a3:da:
         4c:65:f4:db:79:88:14:5f:91:aa:cc:ef:2d:89:db:a7:ee:7b:
         e5:54:d0:70:bc:b7:18:5e:c8:55:d3:03:46:f1:e6:95:da:51:
         f4:b9:47:d1:c2:5c:7b:d2:38:45:91:d0:bc:ea:b8:0b:bb:6d:
         8b:91:43:14:a2:26:36:0f:3d:21:1f:34:40:b2:b1:e9:4e:c2:
         ec:9b:07:9c:49:2b:9a:8f:3e:be:ac:9d:8b:4d:c9:af:1c:5b:
         3d:9c:08:99:19:64:3a:df:a9:4f:1e:56:e8:c1:dd:74:d3:15:
         90:b4:f7:2a:e9:7a:27:ae:68:ec:3f:a0:2a:9d:a6:1c:ff:de:
         5e:16:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----