Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File:                     r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier:          lUtFfMA3gC6KCUX3shLnPNwzFEulxu/7QXXsYmx+lOs=
Subject key identifier:   88:EC:6E:41:A4:DC:44:F8:F2:4A:FD:BE:BB:6B:CC:05:CF:98:1F:CC
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer:       /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial:       01962E99AE757B81CE40D945CC43A11A5494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number:          0484
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
                          2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: Ai8u0eNGR+v/zbMFp6BhEyC1tzg+kcKZPbQW7mGaqP4=)
                          3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ae:75:7b:81:ce:40:d9:45:cc:43:a1:1a:54:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=88ec6e41a4dc44f8f24afdbebb6bcc05cf981fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:e4:70:b0:75:a7:90:51:e2:df:f4:34:87:
                    a4:e7:e5:f4:ed:c0:cb:f1:13:75:76:3f:7c:80:58:
                    50:00:e6:84:87:0f:51:ac:2d:67:ed:c9:20:d6:ad:
                    76:22:a5:2d:d2:e6:6c:09:93:f2:66:47:ba:c7:12:
                    60:20:d0:f6:1a:66:3f:a9:3e:77:c5:b7:67:28:0d:
                    a4:37:71:4e:1d:86:51:95:d5:13:9f:a7:f7:4f:59:
                    69:d4:30:d5:e7:83:f0:1c:38:0a:8d:7d:ad:18:9b:
                    32:c3:c2:fd:70:e4:89:cf:11:a6:ee:c9:e0:40:5b:
                    af:c4:49:db:13:0b:29:f4:9a:78:41:13:ef:d2:09:
                    58:93:58:91:1a:29:31:50:ac:98:95:6e:eb:5a:c9:
                    89:5d:13:9b:c1:f3:07:66:23:33:2e:b9:4a:38:c5:
                    1f:78:0f:f1:8c:15:e2:4b:e8:79:04:d4:16:97:38:
                    76:27:99:94:80:8f:e4:c8:9a:36:05:78:e3:ba:36:
                    91:2c:7b:45:8c:1d:8c:af:ba:86:ed:e9:73:2d:07:
                    26:00:cb:d4:34:b8:5a:63:93:83:dd:fc:f4:7c:8a:
                    24:07:c2:2a:e1:7f:b7:b2:af:ae:2f:a4:62:a8:46:
                    bc:6b:87:5e:0f:42:77:11:d4:5b:75:eb:73:53:3d:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EC:6E:41:A4:DC:44:F8:F2:4A:FD:BE:BB:6B:CC:05:CF:98:1F:CC
            X509v3 Authority Key Identifier:
                keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:db:98:44:12:fc:e1:06:77:a9:59:43:df:f5:bb:8f:d1:1b:
         0b:c4:52:63:61:64:08:90:82:f5:95:7c:94:57:76:b9:6a:15:
         79:da:cc:5c:81:11:29:49:9a:3d:ea:fc:34:90:5b:40:fa:e8:
         9b:17:cd:05:73:68:7e:93:cd:1f:68:8c:4b:8a:c5:74:63:69:
         ab:0e:5e:04:c7:45:5f:71:4f:23:2f:8e:82:01:18:48:99:47:
         b8:cb:d0:d7:e6:37:49:d9:ed:16:82:16:26:c6:7f:90:ca:5e:
         83:44:b2:25:2c:98:3d:52:b7:54:c5:cb:8d:b9:17:be:90:34:
         29:ac:7d:e2:d7:7d:6b:36:c0:92:ff:48:9b:1a:ef:67:93:af:
         f7:5b:71:76:cb:3f:d9:b9:0b:2a:db:92:d5:a2:62:93:d3:9b:
         6f:04:3e:51:20:94:bd:12:a1:19:b5:92:45:1c:a1:6d:c0:fd:
         41:bc:1d:85:a4:2c:bc:37:39:a8:92:c6:ec:63:e9:81:ab:85:
         fd:66:6b:88:b4:f6:55:4f:bd:21:51:53:9c:55:61:31:b4:e9:
         07:96:9a:42:fd:32:2c:f7:20:e8:68:6d:1d:1d:45:14:8d:7f:
         e6:f0:f0:c1:8c:49:ee:ad:1f:23:0b:50:61:ef:52:12:6c:8d:
         03:1c:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----