Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File:                     3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier:          au+pjR2Rena8HiqZDeh4kjDHhk7EP0p6Hsz3WOQtEcU=
Subject key identifier:   26:68:4B:61:B1:94:9C:CB:FC:B2:F9:3A:5F:83:07:FD:27:26:95:E1
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer:       /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial:       01962DF3EC5057B18FD5CE146C9A884BFEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number:          10E3
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: xTS+KKwvDLK/jOu+EUnYSYjM3RFz7TADykktMN7nSOM=)
                          2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ec:50:57:b1:8f:d5:ce:14:6c:9a:88:4b:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=26684b61b1949ccbfcb2f93a5f8307fd272695e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:f5:72:ce:3e:e1:55:5b:98:ee:c7:cf:6c:
                    6a:27:31:5f:ac:aa:a9:0d:b4:9f:8a:ca:b5:32:58:
                    ad:a2:bf:a9:83:91:1f:6f:6e:31:9d:18:b0:3f:82:
                    84:cb:91:d2:f6:25:01:55:98:9b:cb:f4:ac:95:b0:
                    d2:b4:09:52:df:bd:48:18:68:8c:ff:6f:e8:48:b0:
                    a3:34:13:55:4a:3c:d6:d0:cb:fc:29:09:a1:7f:91:
                    0e:c0:82:4f:99:da:41:06:3e:36:a6:80:21:e6:44:
                    b9:e7:c9:d0:38:bb:ed:86:2c:7d:c6:b0:d2:39:9c:
                    32:5f:ca:7c:59:49:5c:df:7e:ed:38:97:82:f8:af:
                    96:f4:50:c9:4e:ae:41:c3:5e:81:da:c4:d7:2c:53:
                    9c:f2:7d:0c:e6:38:e8:a1:52:a3:f7:32:75:72:d3:
                    36:68:7f:db:d2:22:d5:3e:35:13:99:36:e3:65:7f:
                    42:a6:ba:9f:da:4d:ec:59:db:55:ed:4f:7c:30:4f:
                    02:5f:12:01:f8:d0:ec:74:27:ae:7c:26:94:ff:07:
                    89:6a:78:a6:21:ef:ae:a3:59:e7:00:4b:9b:33:7a:
                    52:97:7e:e7:6c:c2:94:86:75:26:35:37:06:2c:58:
                    77:59:d8:7a:a2:1e:50:fe:c9:8f:0f:b5:41:6e:da:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:68:4B:61:B1:94:9C:CB:FC:B2:F9:3A:5F:83:07:FD:27:26:95:E1
            X509v3 Authority Key Identifier:
                keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:e2:50:f0:89:09:3b:02:4d:a3:89:6e:ae:42:ee:98:3b:
         69:12:36:40:f0:53:62:b4:60:a5:fd:59:9c:af:88:5c:2a:75:
         48:f1:07:0b:d7:cf:23:2d:04:f7:87:95:93:52:a4:b2:e8:5e:
         86:a5:6c:13:a6:b4:92:ed:ee:da:a7:9a:97:e3:ea:44:c5:39:
         05:62:f4:90:ff:2b:d7:e7:07:d0:75:b2:0f:00:e5:15:1f:28:
         2b:58:c1:0f:3a:77:cb:fb:b6:59:80:40:e9:41:ed:56:24:cb:
         e5:12:22:fc:4c:12:d8:e5:05:2b:6e:0c:5c:58:9f:01:3a:65:
         49:3e:0c:23:21:dc:3b:0d:99:a0:ba:a7:54:85:da:28:84:37:
         e0:3d:80:d9:3b:27:4f:5a:57:90:e1:11:a8:6b:b9:3e:7a:e6:
         4c:8a:2b:3b:a9:23:eb:29:8d:72:a2:de:f5:ce:2c:00:11:8f:
         76:67:7f:ad:13:c9:9d:e6:c6:60:cf:ce:a0:26:c8:cb:b2:ff:
         0a:db:fb:fc:06:74:93:10:71:c1:c2:45:fc:77:cc:ae:7f:c7:
         38:61:f2:1c:51:3c:c6:54:13:1f:14:1a:3e:5d:49:33:bb:97:
         1c:5f:55:5c:80:d8:5c:95:54:2e:14:2b:e7:f3:da:0f:9a:8a:
         f8:da:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----