Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File:                     3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier:          TjHrjVBsgQHKKqQVf9As++DEu+j36e6fvtDdfLP9iLo=
Subject key identifier:   69:FF:D6:16:41:B7:94:07:7C:E5:4D:F6:A4:A7:E3:28:A4:63:58:8B
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer:       /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial:       01962DF44C978EFC3C2284D719FBEF2FFAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number:          0F85
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: vqRQuAHIeLnsK6Fm0HxH0qAVYooxxGdHE6eEjZFgnI0=)
                          2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:97:8e:fc:3c:22:84:d7:19:fb:ef:2f:fa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=69ffd61641b794077ce54df6a4a7e328a463588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:f2:b7:08:fa:fc:62:37:b4:c4:c4:85:0a:
                    57:f5:9a:89:ce:2f:62:95:4e:eb:cf:41:47:19:24:
                    e2:08:da:02:32:e2:52:e4:cd:bc:7a:d6:0d:09:23:
                    69:2c:53:43:e5:33:e1:fe:40:b5:d8:28:74:3a:66:
                    2a:6e:20:05:74:2f:b0:ee:fd:bf:ec:d3:93:bb:b7:
                    80:94:a9:93:20:b7:6a:52:14:bd:4f:2f:49:1b:e1:
                    92:0b:1e:fd:1e:c7:98:2e:ab:e7:33:b6:02:41:cb:
                    9f:03:b2:3e:9d:b5:e0:ff:31:da:88:86:f3:5f:9b:
                    bb:7d:d2:b0:13:48:0d:3e:77:f0:f8:98:7d:0e:68:
                    29:05:3d:92:7e:39:b9:15:7d:da:05:21:ed:bc:50:
                    f5:0d:45:e8:81:2f:94:4f:75:4a:5b:8a:15:c5:e3:
                    4b:2d:19:5f:19:e4:bf:73:25:3a:5f:ba:e9:5f:d1:
                    8b:bf:13:d6:6d:ab:df:6d:5d:ba:25:56:fb:40:62:
                    fe:ec:5a:c7:f1:e1:a7:57:0c:63:6d:af:23:f2:95:
                    a8:ef:d2:e7:d9:96:32:02:00:fa:b3:63:6d:ec:68:
                    44:22:0d:0a:31:4b:30:f7:67:4f:3a:7d:1b:4f:f2:
                    d9:e1:2d:1e:1c:86:30:21:e3:1d:14:38:e7:10:16:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:D6:16:41:B7:94:07:7C:E5:4D:F6:A4:A7:E3:28:A4:63:58:8B
            X509v3 Authority Key Identifier:
                keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:0e:e3:da:c2:dd:3f:dc:89:8a:5a:03:33:cc:c8:37:04:
         4a:20:11:d4:63:08:4b:d7:6b:4d:d6:49:d8:76:1a:2e:ac:0a:
         b1:45:07:59:f5:f8:bf:3c:37:fe:9c:5c:94:b8:8d:cb:af:83:
         54:66:b1:f0:aa:30:25:ee:98:66:a6:87:64:b3:ab:c0:74:68:
         18:92:5e:79:2a:28:0c:88:10:d4:d1:a1:af:81:85:a1:df:bb:
         69:1d:b0:6e:96:c0:73:b5:84:ad:d9:6a:cd:9e:79:9f:c6:07:
         4e:11:f0:3c:d8:83:63:06:6a:d1:fe:85:c5:18:6c:f9:ca:33:
         c8:fb:12:9d:2b:6a:be:ef:22:db:fb:e6:87:64:2c:8e:9e:b8:
         d5:a2:00:c7:c6:72:66:bf:df:e5:2c:eb:96:6f:ed:e2:91:4a:
         d3:ca:38:de:6e:6b:3d:ba:e9:33:a2:8e:5a:07:2f:a1:cd:90:
         b5:77:31:b3:d1:18:03:ed:69:57:0d:fc:bc:32:38:5f:c3:7a:
         c2:d8:91:80:2a:98:c6:2a:bb:e4:86:da:8b:6e:d1:9c:f6:4c:
         29:19:a0:dd:37:2e:ac:c2:6a:09:bc:aa:9b:3a:00:aa:92:a8:
         79:66:e1:c2:0b:42:c6:b5:2a:3e:c5:e9:13:8f:10:48:ac:07:
         ba:81:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----