Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File:                     P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier:          EM7ilQL5GOtCNuDK34DdFwCNntkwo4wHmcHajuxO4Cs=
Subject key identifier:   39:93:76:72:E0:D0:73:69:D3:49:E1:CC:48:47:65:4C:54:9C:00:3B
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer:       /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial:       01962F06B3566DA161B8114E2E7409D7D9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number:          11F6
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
                          2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: 1FFAHy0aD7dbLYOkuPe0vV8w5z9TE3B5GlL9LKZh8Z0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b3:56:6d:a1:61:b8:11:4e:2e:74:09:d7:d9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=39937672e0d07369d349e1cc4847654c549c003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:e3:68:92:50:d0:fe:26:c0:6b:74:a2:a1:
                    a7:14:d9:fb:ce:8b:81:96:2c:84:b9:b5:8c:11:06:
                    27:0e:ba:df:ba:c4:44:e4:38:ed:ec:34:b0:20:80:
                    95:82:f2:bc:34:7f:a0:a8:d0:a1:0f:c8:87:80:10:
                    06:0d:a8:f0:96:8e:e4:84:a5:54:63:5c:7d:d6:18:
                    3f:4f:96:00:70:68:94:c3:2a:c4:84:4e:d7:7d:2f:
                    92:68:13:ee:b4:24:3b:60:44:1f:24:5f:53:1f:02:
                    4e:a2:79:f8:49:4b:fd:f6:9e:20:62:6c:40:1f:c5:
                    a2:f4:4d:76:9d:fc:1d:8f:0b:c5:38:4a:a7:cb:a3:
                    12:f4:5d:ee:8e:2b:ab:39:c1:1b:36:d9:da:87:96:
                    e8:f6:44:b1:1f:1e:9b:2e:d3:b5:b4:6a:64:d8:9e:
                    04:9d:af:f5:95:ce:28:35:91:82:59:05:01:fb:9d:
                    09:d6:90:39:d7:5c:79:63:12:74:2d:b0:51:96:1a:
                    3b:a0:4c:ca:94:ab:80:d7:73:52:80:8f:13:c1:93:
                    74:af:5b:7a:88:4e:c6:bb:67:26:09:1d:45:54:77:
                    09:83:c1:6b:39:bc:5b:30:c5:8e:ad:5f:6a:f1:ad:
                    e0:23:2a:64:fc:43:7d:7f:b9:b6:01:17:f4:d1:40:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:76:72:E0:D0:73:69:D3:49:E1:CC:48:47:65:4C:54:9C:00:3B
            X509v3 Authority Key Identifier:
                keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:1c:fb:6c:c3:a1:ec:48:79:76:14:42:d7:b5:48:fc:b2:
         82:e1:e5:cc:df:48:1e:e3:49:d2:b1:71:ea:3a:18:4a:4c:69:
         8d:91:93:90:f6:99:86:a3:cd:ea:2f:62:f4:d9:01:86:9e:95:
         80:06:0f:ee:f8:a3:7b:c9:84:ad:ab:1c:74:41:fe:ac:bd:bc:
         55:ce:20:b6:71:0f:64:d1:40:4a:87:fe:c8:20:2d:01:2d:3f:
         6e:94:04:50:42:46:0c:b3:55:03:56:19:ce:6e:86:34:31:d4:
         5f:c7:7f:28:7f:94:95:e7:c6:54:c2:1d:34:24:74:bf:20:18:
         d0:f6:95:09:58:71:9a:a7:cf:20:e2:39:1c:0a:c4:15:73:60:
         35:6a:67:2a:c6:b7:97:50:ba:24:b4:e2:21:dd:31:fa:03:9c:
         04:ed:19:2d:08:0b:c0:98:d4:5d:80:7a:e8:39:20:de:3b:79:
         b4:86:49:28:4c:66:99:22:a1:f4:ec:a6:0d:2a:32:20:67:a4:
         6c:ad:a4:04:7f:5b:85:b2:8e:d5:fc:ed:8e:84:b4:f5:d7:df:
         bf:f3:24:be:18:cd:86:9b:c2:22:9e:d0:14:7d:54:a6:3b:25:
         09:f6:f7:87:a8:78:59:43:b2:b1:37:b7:47:12:e7:45:57:b3:
         76:d0:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----