Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File:                     3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier:          e1kcksLyZnDH0fSoyLMxUmTKtAdV306PvIhUGBAx2jA=
Subject key identifier:   7A:FC:2C:67:41:5A:73:84:9B:BE:8A:9E:55:40:49:FD:F7:D2:9E:6D
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer:       /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial:       01962F06A5C197DFD3B28AD14A152F41A2F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number:          0B7B
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: qPzNJiQrS+JyIUWiTs+mkHg3siupWdB8FePan8jbIU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:c1:97:df:d3:b2:8a:d1:4a:15:2f:41:a2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=7afc2c67415a73849bbe8a9e554049fdf7d29e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:c3:40:fd:1f:8e:6f:6a:38:1d:a0:c9:ad:
                    38:f7:da:3e:c9:54:f9:e0:b6:cd:d8:c6:d8:e7:35:
                    47:ff:98:39:4b:c1:39:f3:a1:5b:d7:bd:fc:dd:26:
                    13:60:bd:c0:68:37:05:57:c5:d5:1b:3c:2a:47:96:
                    b3:9d:2f:65:e7:6c:88:77:06:00:4a:52:60:3e:10:
                    7b:71:d5:72:93:23:d5:03:71:12:d2:81:6e:4d:2a:
                    6b:86:56:87:e0:b5:55:97:ce:db:d9:bd:e0:84:7e:
                    1e:fc:0c:09:ed:a1:fb:df:3c:3e:8d:bd:97:cf:8a:
                    cf:1a:b0:7d:d2:a7:85:38:9f:31:68:eb:87:a5:97:
                    e0:2c:6c:62:f7:2e:11:77:41:bc:82:0d:f9:b4:c5:
                    6c:6e:80:65:82:66:99:4e:0b:68:8c:d9:55:85:6f:
                    0f:65:ab:59:3a:a1:6f:c3:54:a1:00:69:6f:de:ce:
                    0a:08:1c:e1:fc:77:7f:ee:e1:5c:08:80:1b:20:0e:
                    e1:36:c8:b9:a4:86:d9:dd:b1:c8:5a:db:b7:62:92:
                    6d:65:7e:30:86:e6:73:57:63:53:2f:31:bf:f4:b7:
                    1c:35:e0:92:0a:f4:53:6e:55:bb:bf:9c:0e:d8:0c:
                    41:7a:1b:c6:58:97:a1:34:99:48:0b:b2:24:28:85:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FC:2C:67:41:5A:73:84:9B:BE:8A:9E:55:40:49:FD:F7:D2:9E:6D
            X509v3 Authority Key Identifier:
                keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:81:47:a7:63:28:07:5e:39:9b:c7:2c:30:3b:0b:4a:1c:71:
         11:ba:b6:1c:16:32:0a:fa:22:28:cc:da:89:11:a9:69:8d:64:
         4c:a9:b8:6c:92:88:2e:37:ef:67:57:e0:6c:de:71:80:e1:78:
         ae:e8:8d:19:49:15:8a:22:17:b0:8e:25:f6:14:c4:42:c2:e0:
         88:41:67:11:c2:cb:b0:d1:2a:44:da:08:29:c5:26:80:7b:56:
         ae:6b:33:43:63:56:60:3c:86:71:4e:9f:1e:5a:5f:ce:43:e6:
         37:65:e9:ed:9d:87:9a:72:62:2d:23:8b:84:b2:c6:f7:76:14:
         a6:2f:f8:a5:12:bc:7e:ec:56:49:de:86:66:fd:6e:48:8b:33:
         74:f3:2e:e8:8f:38:9d:e2:fe:5e:6c:56:af:2e:1e:4b:a6:70:
         a8:8d:66:53:93:96:3a:4c:00:fb:fe:14:37:3c:5f:03:4f:42:
         19:49:a0:85:87:7b:a9:2d:33:ee:b6:32:e2:83:f1:fe:6c:ae:
         04:2e:9f:96:02:82:cb:1e:e4:9e:26:d8:f6:e3:1c:bb:ad:96:
         3c:4a:ee:d1:98:00:f6:b7:ce:73:8b:a7:8c:91:f0:31:a1:49:
         39:25:23:37:06:95:e1:45:84:29:ea:db:d2:09:d7:27:35:98:
         a4:65:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----