Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          9nCoeDR/+hldVsfUnVTxC+LATE3aWsR5QFR6g2Z15ts=
Subject key identifier:   D7:A3:35:19:96:B9:E7:38:1B:D9:87:02:7D:1E:C5:B4:7D:61:D8:A3
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       01962DF4410C2C9F93143570FF0C8B009568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
                          2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: 57mhknKrJFiASXpjAdpF+R7Yxs0O3TUnobarEHRs074=)
                          3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:0c:2c:9f:93:14:35:70:ff:0c:8b:00:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=d7a3351996b9e7381bd987027d1ec5b47d61d8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:4a:5e:3d:5b:4b:86:05:66:1e:c8:3c:f3:
                    ac:ce:9a:68:44:de:a7:9e:72:f8:75:11:62:ec:00:
                    9d:78:13:b2:3a:cf:ef:b5:a6:18:88:2f:84:df:66:
                    c6:b9:d1:b8:e8:3d:f7:fa:1d:df:14:6f:33:e9:90:
                    56:b7:b1:17:63:f7:f5:04:7f:b7:ac:1f:1c:60:78:
                    e7:5d:30:10:7a:42:3d:09:ef:d6:f0:34:6e:a1:0d:
                    7e:de:f7:85:23:18:b4:43:aa:5e:95:a8:4b:be:67:
                    ea:e7:97:9b:52:2b:3d:7c:e7:7d:f8:1e:ea:eb:b0:
                    62:93:07:db:d7:b3:27:fc:e3:87:c1:0f:21:ff:7a:
                    16:20:f9:46:7a:6d:07:15:a3:06:c0:72:53:6b:b1:
                    81:2b:e1:88:48:13:cf:64:b2:f7:27:34:0c:fc:17:
                    80:8c:73:e9:b2:24:b4:86:95:02:7e:56:b6:ea:24:
                    49:e5:32:7f:7b:c7:0b:16:e9:2a:94:2a:d2:d2:0e:
                    0f:46:ea:47:0f:20:90:f8:b9:0f:84:62:62:1e:d0:
                    2d:f1:71:97:ae:65:bd:c4:b5:aa:4d:c0:83:ec:6d:
                    43:15:d2:1d:6e:bd:ea:d4:20:88:4b:2e:48:80:fe:
                    84:4d:77:14:85:9e:b7:39:a0:8b:28:c9:15:db:ee:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A3:35:19:96:B9:E7:38:1B:D9:87:02:7D:1E:C5:B4:7D:61:D8:A3
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:8a:af:4b:c3:b3:c4:53:f6:f2:6d:97:f5:b2:e5:06:0d:
         eb:6e:7e:25:26:d0:64:16:1a:59:15:da:b6:ed:b9:d4:30:33:
         89:21:3c:78:c6:46:e6:d5:73:14:99:c3:f8:4b:64:35:61:bc:
         be:fb:a5:c1:b5:97:cf:c6:39:26:77:75:d9:df:89:db:10:44:
         2b:39:46:9e:46:03:ec:55:cb:fc:8c:a9:43:7d:5a:85:be:81:
         17:8f:58:21:61:76:14:e3:1b:72:9a:84:f0:a2:56:6b:4b:eb:
         49:6a:3a:7c:d8:fd:21:24:65:33:dd:e7:6d:18:09:e4:3a:07:
         76:92:68:f7:f7:3f:74:ca:b3:ea:5c:27:14:4f:3d:e0:14:5d:
         12:5a:84:d6:56:87:71:72:0f:66:fe:75:f6:47:83:35:0c:12:
         a9:cd:dd:ef:e8:ee:2c:3a:4d:0d:66:c9:5a:69:1d:3f:59:58:
         06:71:09:cd:02:a0:9b:d3:81:23:3e:f1:7f:5f:2c:85:71:7c:
         ee:95:85:73:89:d0:8d:10:95:ef:9e:c5:b9:cc:0b:1d:5b:3b:
         a4:a9:d7:d6:e6:67:b8:be:37:ab:6b:c4:12:cc:c9:49:54:32:
         3e:cc:9d:e7:d5:6f:31:a1:95:8b:8b:ef:67:a6:10:2e:40:4d:
         65:c0:3f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----