Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File:                     3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier:          ZbsflPSq/SSPZbYMWfH7ZdNkvAG24Fh7i2ULJHZGmd8=
Subject key identifier:   2F:11:5C:F4:2C:1D:C5:A2:6A:23:A5:3C:AC:52:F9:1C:2D:13:60:D7
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer:       /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial:       01962F3D98F4AB6486EEA574BE9C990E68A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: sK2SWHHAw/u+Q7YITH/U+gBbHvPZ+waXDownepezYFs=)
                          2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
                          3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:98:f4:ab:64:86:ee:a5:74:be:9c:99:0e:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=2f115cf42c1dc5a26a23a53cac52f91c2d1360d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:b9:ad:c9:d8:02:07:57:a8:d0:03:14:06:
                    1d:f3:a0:65:02:51:03:6c:33:2b:67:d8:b1:84:e0:
                    7d:97:ba:92:04:9a:f6:46:c5:7a:97:8f:8a:0e:cc:
                    70:50:26:9a:45:37:29:3f:91:e6:39:ae:ae:25:e2:
                    79:86:67:71:21:3c:b2:e3:51:58:eb:a5:27:36:e1:
                    04:c1:14:a4:23:fb:56:af:2f:d5:aa:c0:89:fa:83:
                    58:8d:a3:5a:ae:6d:2d:d1:0b:f2:94:2a:10:f0:01:
                    47:21:3d:d2:ed:ad:78:ee:6b:bc:27:cf:2e:11:ae:
                    7a:9a:9c:68:69:2f:0d:4a:bf:be:b4:56:c3:4a:35:
                    c8:6c:66:07:77:c3:39:d2:40:bf:60:11:7f:b6:7c:
                    c9:b5:0a:62:8c:76:5e:22:56:d2:0e:e3:2f:ec:19:
                    c3:d3:e4:1f:aa:e3:bc:98:de:a2:47:26:68:3c:9b:
                    56:cf:fe:2e:d2:95:23:f7:97:10:f4:a0:bd:95:7d:
                    79:16:96:aa:28:17:aa:52:b2:98:fe:9b:f8:ef:32:
                    6c:e7:45:02:5b:fd:3d:d3:9a:ce:35:5f:9a:d6:cb:
                    a0:9c:9d:7b:11:69:d9:a3:75:e8:bc:b6:e6:9b:a7:
                    b1:c0:35:af:16:1b:b6:3f:59:8d:ec:58:62:4d:4d:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:11:5C:F4:2C:1D:C5:A2:6A:23:A5:3C:AC:52:F9:1C:2D:13:60:D7
            X509v3 Authority Key Identifier:
                keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:55:43:ce:ee:df:a2:2e:44:bb:61:b3:e3:8b:65:c0:bb:
         fc:5c:d9:0e:f1:87:e4:39:47:37:82:e3:01:a7:1a:9d:7c:5e:
         d2:fc:26:7b:b3:0f:72:92:73:81:f4:f4:c7:49:08:66:c0:24:
         a8:0d:83:b3:fd:08:89:7d:40:16:50:1a:8e:7c:c0:c5:34:7c:
         05:74:5f:78:5f:66:74:c7:33:04:80:88:ad:78:e7:ab:8b:2c:
         5a:43:5f:2d:66:01:33:1f:cf:89:73:00:04:92:95:b5:b3:b5:
         0a:33:39:05:5c:9d:19:b1:ca:eb:18:86:83:4b:a5:94:ab:77:
         af:35:b6:6f:91:53:e6:6c:5c:a4:01:1e:84:86:a9:6a:4c:02:
         13:39:06:df:c1:b1:fc:48:dc:8a:70:42:ca:88:96:a3:52:75:
         28:bd:aa:7e:aa:3f:4d:94:94:89:00:28:30:74:26:56:01:85:
         1d:eb:aa:7f:81:f8:08:c2:2f:2e:d9:95:b8:5e:49:b3:c5:56:
         02:4e:1a:c2:33:f1:9a:68:50:23:c2:0a:2d:11:8e:8f:3e:8d:
         24:8c:58:ad:fc:c1:cc:a9:19:1d:45:02:23:1a:fb:d4:25:35:
         47:71:85:af:19:ab:9e:7c:e9:80:a3:cd:46:6c:a7:40:f5:13:
         d2:cc:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----