Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File:                     PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier:          V3qcYCRLLbu3/ovjOFiBX0WoKB2p89wtoKRhlz+SELw=
Subject key identifier:   BA:D4:07:B3:3F:A4:2F:45:1A:78:78:F0:22:B1:D2:6F:E0:88:89:46
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer:       /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial:       01962ECFE873E1BAEFD4D0488D788218A3CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 11:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:39 +0000
Files and hashes:         1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: PUf9iQMpvg8AvPJZfSjKMzCbNwuNBwf8l5AT3nwA8fA=)
                          2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e8:73:e1:ba:ef:d4:d0:48:8d:78:82:18:a3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
        Validity
            Not Before: Apr 13 11:01:39 2025 GMT
            Not After : Apr 14 11:01:39 2025 GMT
        Subject: CN=bad407b33fa42f451a7878f022b1d26fe0888946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:6e:45:69:cb:07:53:82:32:a3:84:f7:96:
                    2b:48:98:cc:a2:87:92:b2:47:ab:41:c7:3d:98:ef:
                    07:48:b9:90:05:83:13:91:fc:ef:75:fb:0a:db:eb:
                    35:db:e7:38:c2:07:38:12:03:cd:c5:77:87:48:e2:
                    33:45:e6:28:c8:49:a7:cd:52:c7:b9:fe:81:59:56:
                    c2:15:e3:ba:bb:c4:83:9d:de:c7:0f:13:b0:92:99:
                    ab:4d:83:b8:86:9b:47:ca:a7:74:b1:21:c9:92:5e:
                    07:0a:d9:de:89:bd:b1:ab:aa:47:60:0c:1c:1a:b6:
                    7e:52:10:f8:27:41:e9:3e:ad:91:28:31:e2:64:04:
                    1b:77:0b:cf:43:0f:45:a2:e7:00:39:94:12:aa:bf:
                    35:bf:13:05:7d:c4:8b:fc:86:14:7b:9b:70:bd:1c:
                    d9:0c:3c:ca:6b:c1:be:07:b8:38:6d:a4:5e:42:05:
                    31:62:be:bd:eb:3b:24:26:46:9b:55:9e:6f:a2:59:
                    16:5e:1f:e7:4a:03:7d:87:0b:41:84:25:7e:8d:f1:
                    75:03:44:26:1d:ec:ad:56:56:e2:bf:41:a0:55:59:
                    92:e1:2c:98:89:63:01:de:3f:d4:4e:ab:f2:94:3d:
                    09:98:06:5f:fc:0b:5b:d7:ae:ce:6a:b3:0e:81:56:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:07:B3:3F:A4:2F:45:1A:78:78:F0:22:B1:D2:6F:E0:88:89:46
            X509v3 Authority Key Identifier:
                keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:04:3b:0b:9c:a4:e4:09:c3:c4:dd:a5:86:e4:08:e0:3a:b4:
         ef:55:72:b1:40:0a:a6:d0:f4:17:4e:1a:62:18:6e:3c:ce:3a:
         b7:e7:dc:c8:82:d6:67:d4:55:6b:09:85:41:9c:de:f7:05:f0:
         5d:aa:f2:ab:71:08:05:08:d7:7a:df:9a:be:d2:66:51:a8:b4:
         63:c9:44:55:3b:56:8c:5e:49:38:84:10:a8:7a:a5:54:ae:63:
         94:0d:ce:e4:da:81:b3:b1:84:e6:f7:5f:84:ec:0f:26:aa:cf:
         69:b7:86:e5:10:29:72:7e:62:ca:1e:e9:3e:f0:d4:1f:f0:90:
         8b:9d:0f:07:6a:70:7c:14:9c:37:5e:c2:c3:a6:7e:5e:86:2e:
         41:9b:02:c4:3a:98:e2:2d:45:89:af:4f:8b:e5:5e:1e:76:91:
         e4:95:dd:13:91:b9:4f:fb:b6:c5:e4:c6:33:1c:af:2b:61:46:
         65:d8:bc:c0:00:fe:63:f1:b8:5d:c7:b9:78:85:d6:70:42:28:
         49:5e:7d:22:2e:a6:7f:73:75:47:be:d1:51:a8:db:53:fd:ba:
         3d:a4:81:d7:b2:fd:ec:9c:e2:1a:ca:81:3a:f5:19:41:a8:35:
         b4:4e:c2:88:83:4b:9b:10:0e:eb:7d:3e:f8:82:9a:d6:67:8e:
         44:a2:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----