Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File:                     3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier:          l/otkN0/lzW8GY7t4ydndESNSE5xUZOdnuQ8gBFs+YQ=
Subject key identifier:   49:AD:15:1B:50:74:85:D0:DB:38:B7:01:E0:A9:9E:22:C3:50:EE:4A
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer:       /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial:       01962E987BC71BED8C958EFBD6D753B4C445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number:          0E3D
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
                          2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: Uk4vm6B8Z3lBW1PFDQdOH5CKwFwYNH6JrtMjAOgXECI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:c7:1b:ed:8c:95:8e:fb:d6:d7:53:b4:c4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=49ad151b507485d0db38b701e0a99e22c350ee4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:3d:bc:fb:79:9e:7f:c7:92:11:26:74:a6:
                    a5:dd:cc:be:d0:c5:3e:f2:b2:0b:f8:c9:76:a4:57:
                    ba:96:02:d2:28:d8:db:44:62:2b:cf:00:0c:ee:a4:
                    e4:03:7c:8c:38:61:56:7c:9c:4e:be:73:f6:01:56:
                    09:2f:98:23:af:fd:a4:c0:5f:e2:c4:1a:36:93:fd:
                    ec:f5:0a:28:90:3e:90:7c:35:19:4c:d3:a8:ae:7d:
                    64:74:a2:c1:4a:d8:91:be:dc:22:df:5a:87:1e:96:
                    5e:6b:76:b0:1f:df:1f:ac:15:55:6a:8c:dc:99:14:
                    b4:cb:5a:61:56:64:62:b6:7e:a9:1a:e7:7f:19:77:
                    dc:05:01:a0:f9:b1:22:07:8d:ea:0b:34:a9:1d:8d:
                    74:3d:14:ae:98:23:a4:f6:af:d6:80:97:97:78:55:
                    c8:1a:6c:74:21:e5:ed:39:bd:c0:bb:51:f8:bd:e1:
                    96:45:49:30:85:bb:19:87:4e:d1:cc:9b:a8:e8:ba:
                    ce:2b:a8:5d:7e:82:d3:df:97:fa:e8:b2:12:cc:74:
                    90:50:cb:55:7b:a8:e5:8d:04:70:00:66:f5:89:d3:
                    0d:5a:b3:1a:82:d0:16:33:9d:a9:81:7e:aa:bf:62:
                    4a:08:52:c9:0a:46:c5:06:42:2c:22:ab:6b:da:91:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:15:1B:50:74:85:D0:DB:38:B7:01:E0:A9:9E:22:C3:50:EE:4A
            X509v3 Authority Key Identifier:
                keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c8:41:26:fb:cb:77:39:b4:24:0c:75:5a:23:9b:a2:70:b5:
         e2:8d:89:96:39:d1:88:e9:13:3b:25:a8:cb:f0:06:16:59:43:
         a6:f8:61:68:84:1c:5f:00:70:d1:7a:49:3c:f8:52:40:05:7e:
         28:1b:6c:94:bf:02:f0:82:ea:c3:35:55:77:18:29:3d:2e:78:
         f9:10:85:e8:56:7f:79:ce:73:48:29:3d:17:90:93:bf:92:c6:
         4a:cf:60:48:cc:ed:12:b3:31:e1:c8:89:e8:9c:49:8a:3d:62:
         ae:92:0a:92:1b:b2:2b:f0:5a:e0:55:eb:5a:6a:2d:17:9f:a7:
         50:28:4e:67:37:32:a9:7c:36:e8:c0:1f:df:d3:ec:57:4b:31:
         9f:18:bd:2a:59:eb:7b:eb:06:c0:99:a5:55:d1:4d:22:2a:6a:
         17:a3:52:57:85:f0:b1:49:ed:53:39:a9:d3:53:0a:36:d0:db:
         e3:54:14:5b:93:60:be:ba:5d:f3:89:27:6f:ba:06:ee:5d:82:
         a0:58:aa:53:ca:15:2c:ab:d6:03:37:3d:05:98:7a:a6:6c:63:
         7e:2a:01:f3:76:44:78:c5:70:a6:54:d9:e5:cf:ad:bb:4c:14:
         f3:8d:42:af:8b:ba:1e:f7:6d:7b:6e:7c:78:d3:ad:fe:c4:ad:
         2a:75:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----