Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File:                     PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier:          1fIdm+sJi9Ogj6M72NuS+kNJffDeEZuxi4r/MIqdZHc=
Subject key identifier:   A4:61:C4:3A:40:F8:D6:1F:40:50:EE:49:89:98:F8:15:53:AC:12:94
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer:       /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial:       01962ECF6DE558360C4AE139599DBC713832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number:          067D
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
                          2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: RQW8EnPhIMr7kNo/nKYXxCTjoD1ljz/ymdj9yOO7F2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6d:e5:58:36:0c:4a:e1:39:59:9d:bc:71:38:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=a461c43a40f8d61f4050ee498998f81553ac1294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:1c:2f:be:6e:fa:dd:65:ad:1c:c8:cc:7f:
                    21:90:f5:94:b1:09:ca:75:69:df:cf:32:f8:3a:b1:
                    d4:43:6f:4b:0c:11:b7:c3:04:a7:d1:91:82:a3:a5:
                    27:cd:8d:7f:cb:0b:93:cc:0f:37:d4:81:69:88:7f:
                    32:43:17:af:cc:53:44:7b:5c:06:10:64:49:f6:f6:
                    6d:e6:f0:f1:d8:e4:da:d9:e0:f7:bc:2c:43:e1:93:
                    e6:d5:48:5e:67:d5:3b:ee:e1:7e:ec:21:e5:33:b7:
                    c3:bf:53:a5:81:e2:02:02:fb:f7:dd:78:35:d9:32:
                    21:c1:0d:04:30:a0:72:cc:d1:3d:48:da:aa:84:39:
                    af:d2:c6:35:8a:39:20:f9:d9:5e:d9:94:d4:fe:04:
                    a4:85:80:6a:84:62:a5:6f:69:df:93:75:bf:83:6b:
                    0f:7f:d7:68:77:c2:4c:c0:fd:14:f7:aa:ce:4d:42:
                    db:69:1a:35:69:a1:0a:ce:d5:1b:df:25:93:4d:9d:
                    0b:60:94:ef:5a:91:4f:88:d5:2a:05:e5:5a:65:d9:
                    d9:6f:b7:49:d7:54:76:2a:5f:e4:8a:83:84:db:7f:
                    a7:aa:32:3a:91:96:44:53:30:ef:c6:39:83:4a:41:
                    8b:06:7e:da:a0:89:67:fc:48:ad:fd:a1:ff:6d:96:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:61:C4:3A:40:F8:D6:1F:40:50:EE:49:89:98:F8:15:53:AC:12:94
            X509v3 Authority Key Identifier:
                keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:c9:0b:c7:e1:9a:8a:6d:65:bc:62:97:29:3a:03:7c:4f:
         23:48:4f:e8:2f:62:d1:97:50:0b:e7:40:b3:4a:c2:05:57:fe:
         2f:5a:6d:74:e8:ee:2f:b4:1a:1d:37:5e:2f:fe:56:cc:f3:aa:
         53:4d:b6:37:96:f2:a6:74:74:94:ae:b0:4a:bf:da:8f:db:10:
         6a:49:8b:74:40:9e:73:04:c4:21:7c:b2:b4:5c:0f:68:6c:b7:
         f6:38:ed:89:65:b5:03:4c:e3:68:95:c0:0a:67:61:b5:af:35:
         05:ed:47:79:83:7e:9d:39:8d:1f:4b:46:18:b9:ff:a7:88:d4:
         0e:bf:bd:54:b5:34:be:f6:3f:b0:3e:e3:87:3f:f7:2f:49:a3:
         1c:4f:15:95:8c:49:0f:29:3e:d9:91:cf:ad:a7:22:f2:4c:9f:
         b8:47:4f:8f:c5:3d:c1:5b:a3:b7:9f:2b:4b:c8:11:c2:47:ee:
         66:33:d7:72:6d:31:d7:1f:d5:a8:8e:d7:28:65:5f:97:8b:2e:
         b8:b7:3c:6b:5a:17:f5:51:16:9b:0a:25:19:da:e4:08:8c:22:
         41:08:40:3c:f5:eb:db:3f:6b:ba:30:db:17:23:19:6e:d0:86:
         ab:56:05:ea:40:eb:0a:33:46:ab:a0:96:fe:f2:97:89:07:40:
         cf:de:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----