Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
File:                     P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft (raw, json)
Hash identifier:          mOk5dxHGo9DzcuP7NmvB5+qmXulI3Xd/WnRyvIGJ2/A=
Subject key identifier:   03:88:A8:C8:53:EB:35:EA:A8:E0:98:8B:EE:38:CD:BD:BC:4D:22:93
Authority key identifier: 3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
Certificate issuer:       /CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Certificate serial:       01962ECFAFBD6512C7AC3194A33028A64ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
Manifest number:          098F
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl (hash: imnq56iGUrsDgxvmodBPS6g5tRKeukLSxQ76K/Oif9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:bd:65:12:c7:ac:31:94:a3:30:28:a6:4e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f4c026a6e274309303cea0c17e09493613c1f2e
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=0388a8c853eb35eaa8e0988bee38cdbdbc4d2293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:83:7e:72:44:57:b9:9d:cd:fd:3f:7f:26:
                    8c:2e:ef:a1:db:26:0f:d9:eb:76:0d:94:d4:4f:de:
                    90:41:82:77:f2:13:11:bf:59:96:c1:e7:91:83:97:
                    52:3c:d1:dd:a1:30:f5:b1:44:f9:f8:0f:62:3b:da:
                    c9:67:bb:38:d8:fe:1b:b9:9c:cd:81:e9:75:92:84:
                    0a:57:89:12:b5:74:8c:7f:ac:4f:25:b5:60:63:3e:
                    9c:57:ce:04:be:3e:40:04:98:bc:46:32:46:d5:3c:
                    31:09:93:d7:b9:a4:ac:5f:80:f5:47:82:ed:5a:8c:
                    b1:8b:7b:95:ed:be:91:43:73:35:1a:49:2a:11:1c:
                    ce:82:7b:46:fa:fc:ef:b2:67:96:7e:ad:6f:a9:ed:
                    e7:a4:0b:97:d2:6d:3f:f8:69:6e:80:b3:86:ef:3a:
                    b5:23:cf:a6:ea:02:56:27:e4:91:c6:f4:94:63:00:
                    5d:f6:a7:e8:60:e0:d2:16:bf:75:94:7f:23:26:31:
                    c1:60:5c:42:64:97:fe:e9:2b:15:23:6d:20:5b:b2:
                    69:e3:65:f6:54:0d:2c:ef:85:d1:6f:94:74:ef:64:
                    84:75:cd:44:c8:39:c3:2f:c2:ff:e6:e7:38:17:e1:
                    c8:ee:00:ea:2b:91:f0:02:23:3f:08:15:ab:60:ef:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:A8:C8:53:EB:35:EA:A8:E0:98:8B:EE:38:CD:BD:BC:4D:22:93
            X509v3 Authority Key Identifier:
                keyid:3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:fb:13:d9:d2:f2:15:97:aa:9f:c4:17:4d:7b:8f:23:b6:
         80:b3:69:be:96:ea:a6:25:c2:be:c5:9e:9e:cd:5d:bb:86:ee:
         15:bf:77:4e:99:43:d8:3a:01:2d:27:7b:ad:9a:06:2f:d9:6d:
         3e:13:68:76:0f:39:a8:ab:22:9f:7d:c8:e5:17:ae:ac:ef:d1:
         22:f9:8c:cf:c9:93:5e:c8:1d:02:1a:3f:ff:04:d4:e4:fd:e8:
         76:0f:78:da:e7:6c:fb:22:33:83:dc:07:ce:82:f8:6c:3f:52:
         9a:89:6c:93:3c:dc:46:b5:17:91:21:52:64:ff:d3:e4:8e:d9:
         06:4a:04:57:73:b0:bd:6c:3e:2a:ef:6a:a9:18:6e:30:d7:26:
         43:0a:89:3f:2b:b0:ef:ad:69:df:4e:b6:36:60:20:ee:bb:96:
         74:8b:c4:97:cf:a2:33:ca:64:75:c7:b8:c5:70:eb:b0:97:57:
         04:81:7c:5d:cc:7c:dd:28:bf:ef:cd:fe:07:88:fd:4a:6c:26:
         9a:2f:3b:b4:3c:a6:4f:0e:48:0e:ab:98:5f:66:2f:dd:98:53:
         fb:dd:6a:59:8c:03:53:16:78:d6:64:57:b4:aa:cb:42:2f:de:
         af:1d:09:f7:33:2e:35:6f:ef:76:ed:a8:ee:1c:c1:1c:9f:61:
         9c:1d:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----