Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File:                     3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier:          PwuS/MdCckYe30qIazDlT4UVNoe1GaEvvNqH1EgI3Z8=
Subject key identifier:   48:EC:40:1C:66:6E:00:A7:5B:59:4E:5E:31:8A:8C:07:0D:78:69:54
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer:       /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial:       01962E2ABC7284AE9E393B7B4A97F559B021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: Ie2ke8Nu/DzDgGHcegeSm/Qeu8DNl8dI0RRdY1rDT3M=)
                          2: FoF8ZUBZ5kCu4oa83zINkMjWAYM.roa (hash: RhcSxCtgICb2ZYm3ZoQOXVJ7hwELiIb6QSru+4BTc5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bc:72:84:ae:9e:39:3b:7b:4a:97:f5:59:b0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=48ec401c666e00a75b594e5e318a8c070d786954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:a8:32:b4:09:6c:ce:df:2e:0e:5d:84:e2:
                    55:90:8f:48:77:d8:65:38:1a:2e:91:2e:e0:ad:34:
                    4d:6a:23:8f:68:8c:5e:ad:57:50:ec:bc:97:a5:97:
                    a5:a7:56:ed:25:de:5a:ac:2f:f7:7c:44:58:af:9e:
                    a3:c1:f2:6b:37:35:b0:72:bc:fa:a3:5b:be:e2:ea:
                    02:cc:c5:ac:45:ea:7a:bb:6c:78:6d:33:1e:4f:b8:
                    30:6c:fc:41:e6:75:14:4d:c0:b8:c0:af:90:f4:ac:
                    24:80:79:96:bc:67:17:0e:92:33:90:0d:23:a5:46:
                    96:c1:d2:29:21:bf:89:f5:8c:d8:09:91:38:1c:fc:
                    df:bb:53:4b:2a:3e:ff:b4:42:65:78:5c:78:7b:c1:
                    ff:f4:c7:03:fb:70:76:bb:55:aa:4e:9c:58:17:2d:
                    30:87:01:5b:0a:14:50:05:48:a2:c6:00:18:d7:a3:
                    0b:76:d1:18:0b:fc:8d:91:c4:da:11:1b:f1:7a:42:
                    dd:44:aa:d6:da:a8:9b:c3:14:4c:29:3c:c4:e8:b2:
                    d8:30:2c:89:64:e4:f2:2a:fc:5e:69:33:7f:96:bb:
                    67:58:5d:7d:87:4f:31:89:7f:a0:94:05:34:57:22:
                    64:4b:6f:36:56:87:28:8c:d9:a1:53:5e:b5:ca:26:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:40:1C:66:6E:00:A7:5B:59:4E:5E:31:8A:8C:07:0D:78:69:54
            X509v3 Authority Key Identifier:
                keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:1d:84:b1:29:b8:7a:12:e7:53:32:31:0a:9b:37:fe:6f:e1:
         ba:3a:c6:0c:35:9a:b5:19:ea:a2:10:1e:96:8c:43:fc:40:9b:
         13:40:3b:77:5c:bf:bc:10:4a:ad:97:e4:ce:3b:6a:13:2b:c1:
         ca:68:9d:47:59:5a:78:65:e7:d7:80:18:b1:28:f3:68:da:cf:
         c5:d2:7f:f3:ba:c3:72:df:b3:ac:ad:3d:cb:94:16:66:12:c2:
         c1:a7:e6:7d:62:1f:53:7e:7d:ee:f5:fb:6c:73:45:0b:81:ec:
         6b:5b:69:5a:c3:32:dd:4a:d3:b7:f1:0f:32:e7:ae:3c:6a:b0:
         3b:21:1d:bc:a7:e4:e1:45:08:50:c8:eb:9d:be:2e:63:1b:f4:
         eb:1c:e1:03:6e:ef:20:0b:22:e0:05:d9:2c:fb:0d:a7:44:9d:
         cb:99:82:88:df:3a:c3:cd:5a:1f:a9:1a:87:29:0b:a7:30:3f:
         48:15:65:b1:5d:39:7e:91:5c:c0:66:92:13:4a:25:2e:60:84:
         a4:fd:a8:2f:5f:d8:d6:ba:12:96:63:0f:17:25:60:6a:89:5c:
         fb:b1:25:60:d5:54:2c:4d:31:61:a0:3d:32:d6:e9:c8:bd:0f:
         e6:29:2e:12:98:85:ae:53:04:34:ac:c7:b0:a4:05:d3:17:e9:
         04:f5:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----