Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File:                     PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier:          y8T7q/KIoZaDl73kXUYePk7+C2Hh4lShjgSbBcxAaZc=
Subject key identifier:   F5:2F:ED:9D:F6:F5:E5:56:E5:B0:6D:F2:51:72:5C:31:27:65:3A:88
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer:       /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial:       01962F3D6B06448158A393553F2BC0FA9CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
                          2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: pXH/WR6m4VOhnaDDeacRaeLlZJ3CEZSEvVuTz7Ntjjc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:06:44:81:58:a3:93:55:3f:2b:c0:fa:9c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=f52fed9df6f5e556e5b06df251725c3127653a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:c0:c5:4f:06:fa:5e:ee:4f:b1:43:f6:22:
                    4d:d5:7e:d8:1a:da:19:38:3a:6d:ae:7e:cb:cd:36:
                    5a:a7:04:d8:33:19:08:ab:c3:6b:25:98:08:a8:c1:
                    6b:64:67:22:58:95:41:22:02:3d:3b:21:f4:b9:7e:
                    48:d6:e3:8e:34:5f:2f:e4:a8:13:9a:9d:59:74:5b:
                    d1:8d:b9:44:fc:80:28:5d:d5:b0:cf:a4:3c:0e:8f:
                    3f:ac:54:71:ce:1e:d9:39:b6:11:91:cc:b0:00:66:
                    05:24:a0:93:43:21:c4:74:bf:a4:66:28:7e:a0:dc:
                    79:8d:a2:53:53:b2:2d:ff:7e:9f:dd:8c:8c:54:bb:
                    6a:5a:f5:73:87:36:80:31:03:97:5f:30:f0:5a:53:
                    16:e2:5b:87:fe:c5:31:d6:e8:19:65:71:8b:63:5c:
                    37:9a:a0:80:4a:4d:7e:8c:b6:b4:15:ac:b7:e2:d9:
                    2c:73:77:39:51:03:6b:6e:f2:b3:bc:97:b3:41:65:
                    29:0e:6f:2f:1d:28:8c:67:ff:e3:17:5f:c3:86:f6:
                    4f:91:e3:c9:64:81:54:ad:d0:f4:d6:46:bc:c3:84:
                    f7:1b:38:92:42:73:14:3a:72:30:09:8b:fa:44:20:
                    6e:d3:41:35:33:a2:f3:73:cd:d8:c4:68:5c:13:cb:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2F:ED:9D:F6:F5:E5:56:E5:B0:6D:F2:51:72:5C:31:27:65:3A:88
            X509v3 Authority Key Identifier:
                keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:cc:1c:72:99:3c:06:cd:5a:9a:bc:12:b3:0d:68:c9:9d:
         dc:cb:4e:f5:29:c4:67:0a:58:1e:a7:dd:95:27:c8:c6:d4:3e:
         37:a4:75:6e:79:96:be:ff:a0:70:b1:6a:0d:9a:8c:cd:d4:d1:
         97:85:b7:5d:ce:f4:2a:15:28:7e:d1:bf:91:84:44:e5:05:75:
         0b:96:27:f3:07:10:49:de:32:ec:6c:3d:f6:1e:40:78:9b:be:
         75:b1:a1:e9:3e:0e:f0:e4:ca:5b:0c:8c:21:a8:a9:44:18:82:
         75:7a:21:cb:f3:9d:9c:e0:5c:ba:c5:47:52:ef:33:e4:7e:38:
         ac:48:cc:35:ae:64:b5:c4:ce:d2:f6:ae:53:53:a3:e5:da:a2:
         95:18:ce:26:12:48:e5:6f:3b:2e:9f:09:9b:68:43:8c:6a:6d:
         86:cd:be:8b:59:85:0f:37:f4:29:bf:c1:8c:99:ce:4a:e7:49:
         ce:79:c5:91:51:51:e0:1c:57:1e:24:5d:a6:dc:8c:90:27:0a:
         ae:f0:6f:31:b1:73:dd:75:98:00:ee:ba:8c:39:a5:d6:e1:85:
         59:10:45:e0:58:5a:01:e3:0b:7c:3e:9a:43:fb:61:87:73:0f:
         7b:79:52:60:2e:5f:18:ce:e7:b8:41:50:00:56:2a:3e:b2:62:
         c8:ce:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----