Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File:                     2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier:          UmDAQlMQtuo+LklOgqy72mkfi6r1G8jX/MmWyVfCy8M=
Subject key identifier:   C3:30:FE:A6:EC:5A:A8:4E:B7:99:52:4D:68:E6:BD:24:F7:49:4A:90
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer:       /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial:       01962E619AAC5249C923D6D57F3A84FFD486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: kZ6U0RbOOfb8m/foNw08zkEP2BAnFhASM123O1HUn/E=)
                          2: gd86nab0qf28eq3d5pPFq5e9rZo.roa (hash: OleM9BzJjHgCcSMlxVVC1tH0LyJmqbhh/CO/g3APccs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9a:ac:52:49:c9:23:d6:d5:7f:3a:84:ff:d4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=c330fea6ec5aa84eb799524d68e6bd24f7494a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:2e:36:1b:f4:21:bb:bd:93:39:d6:03:8c:
                    b9:75:47:a8:de:68:90:09:19:4c:5a:31:d4:5b:ec:
                    12:bf:74:7e:9c:20:e6:ea:29:53:e4:3a:2a:88:be:
                    8d:91:f0:d6:96:a0:e7:d4:7d:03:66:39:17:84:8f:
                    08:aa:21:21:ca:0b:4c:61:b7:d6:8a:d9:6a:a3:c8:
                    51:94:d2:b6:90:86:cd:6a:42:fe:9e:5b:03:fc:6e:
                    b8:35:10:84:f2:8b:c8:5b:06:29:61:04:79:f4:2b:
                    fc:81:0b:e9:24:64:27:2b:6a:cd:c2:60:1c:a3:5b:
                    c0:12:bd:ea:21:a7:69:4c:37:6d:58:a3:d7:93:6a:
                    c4:e5:86:ed:41:37:f3:bd:1e:98:5b:b9:19:66:0e:
                    28:3e:97:ec:b8:af:30:36:b2:c5:42:a6:b4:29:af:
                    b9:21:8a:6a:cc:4e:15:f4:fd:ce:6a:bd:5c:f3:90:
                    1d:d5:5a:9c:2b:41:2d:7c:bf:32:82:6c:47:b5:ba:
                    97:75:21:84:8b:78:6c:94:a5:38:b6:0b:c7:4a:ff:
                    d9:09:f5:3b:92:67:d4:f3:bf:d3:c2:03:f2:96:cd:
                    d6:48:d7:8c:05:ad:6b:cb:81:53:ab:eb:42:48:4b:
                    e1:21:f5:e8:26:f5:0f:9e:06:5f:4a:96:7e:f9:ad:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:FE:A6:EC:5A:A8:4E:B7:99:52:4D:68:E6:BD:24:F7:49:4A:90
            X509v3 Authority Key Identifier:
                keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:8e:10:c9:ee:46:b0:91:92:2e:11:c8:90:09:30:52:7a:
         ea:32:ea:30:b8:18:b5:e6:9b:f5:17:b9:07:b7:af:36:99:fb:
         da:86:08:43:61:29:7d:b0:83:b8:d8:47:5a:c3:d3:43:74:fc:
         f5:55:83:63:ae:37:7b:dc:dd:90:08:bf:30:d1:65:46:69:bd:
         5e:df:e9:17:18:bf:6b:29:0b:66:45:95:22:01:58:0a:92:30:
         0b:96:85:be:fc:04:ca:a9:39:c0:12:15:ff:e1:d0:9a:1b:ef:
         04:06:74:12:9e:06:3a:5a:72:e0:bb:57:57:ec:b5:7b:99:8c:
         4f:50:1a:cd:a9:72:9e:de:26:d9:c8:24:c8:be:63:22:a0:c0:
         ff:8a:3f:78:ba:2f:37:62:8c:3c:90:7e:09:26:42:c1:ed:de:
         da:56:b5:6e:19:3f:74:7d:c7:55:fc:d1:1c:43:34:a5:2c:35:
         1c:5f:bd:39:63:3a:f6:ed:06:2d:08:90:d3:ae:e6:fb:3e:81:
         55:49:7f:d2:c9:1b:b3:d4:50:a0:4a:3d:70:af:5d:e8:7b:07:
         9e:81:f2:ed:df:d2:74:ca:74:b6:3d:3e:e7:00:0b:10:a7:0d:
         ca:13:00:73:32:9c:cc:1f:6c:9b:72:2a:e4:6c:d5:09:c4:1b:
         01:be:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----