Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File:                     3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier:          OQx2JYELw2TInsk6qlCnish/Z4W6zuvNRDLDYo0+eks=
Subject key identifier:   35:22:6D:B2:63:86:1F:2F:0A:7F:28:76:45:19:DA:46:07:FB:E9:56
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer:       /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial:       01962FAB7F8BBCDB24ABEA04D3064A421362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number:          0243
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: tlq2RWm5k685v9/L/OmhjZxHNE3ZYw4vKCS/PSyZecg=)
                          2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:8b:bc:db:24:ab:ea:04:d3:06:4a:42:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=35226db263861f2f0a7f28764519da4607fbe956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:16:94:5f:44:94:1c:02:4a:86:1a:2e:a8:
                    f4:76:22:ad:54:5a:a7:b8:13:73:44:ac:51:a3:f9:
                    6a:87:59:31:3a:32:b9:c9:ac:bf:7b:40:af:07:75:
                    43:be:57:0e:08:d8:3d:82:e6:e1:4d:52:66:e1:03:
                    be:b4:71:40:6d:93:36:fd:3f:eb:b0:ab:fa:8b:02:
                    8d:63:65:b5:75:85:b7:ae:16:d6:52:c4:d1:68:18:
                    6c:e7:bf:85:22:b4:c7:86:74:46:4e:79:b5:a1:10:
                    ce:ff:69:a2:85:02:d3:25:13:2d:5d:44:95:a4:60:
                    cc:6e:f7:01:e5:1c:d3:1a:30:4d:ab:5c:c3:8b:26:
                    d0:d4:4a:6f:2e:9e:54:6d:17:24:6f:66:ef:fb:41:
                    49:5f:16:76:9e:7a:5e:96:ed:5a:6c:c3:67:3f:90:
                    3b:3b:3b:9d:8a:6d:00:0f:a9:08:0c:a3:58:c7:1d:
                    0e:23:6a:e3:af:5e:a7:82:33:00:ed:67:88:0b:4c:
                    18:7e:6c:dd:78:6c:2c:9d:bb:08:d2:3b:84:cb:4a:
                    39:a4:d7:86:2e:6e:16:84:7c:68:04:63:f0:cf:3f:
                    36:0e:6f:73:99:89:17:07:37:68:1e:fb:0e:8d:8a:
                    89:ee:d7:34:53:17:85:f3:6b:3c:8b:e9:ea:ee:33:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:6D:B2:63:86:1F:2F:0A:7F:28:76:45:19:DA:46:07:FB:E9:56
            X509v3 Authority Key Identifier:
                keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:69:db:2b:4a:f6:37:c3:33:f5:9a:3f:e1:50:82:02:ee:
         a8:af:ba:6e:1a:7a:f1:72:23:a1:b4:39:35:f9:71:ac:16:78:
         73:64:74:79:dc:a3:69:b6:ac:64:7e:8d:7f:8a:a0:97:d5:44:
         00:8f:b0:79:64:8a:22:3f:44:b1:31:43:a0:ca:e5:a9:34:dc:
         e7:eb:d2:a1:e4:17:77:19:a6:8f:89:68:c3:25:88:09:4b:a9:
         47:b5:d9:f9:a8:c3:fa:5c:1e:c2:a5:2a:96:3a:12:c3:c5:7e:
         3e:e8:54:1d:12:93:61:7c:8a:fb:8e:51:55:78:48:bc:f3:8d:
         26:f8:d3:b8:e1:7e:0f:7a:3a:56:f1:99:62:f1:ce:6e:f1:22:
         31:12:11:d0:b5:50:c4:65:f3:f7:ae:3c:50:cd:55:a3:d7:7e:
         af:50:1b:34:47:13:bf:0e:e9:aa:8c:44:47:d7:39:00:0e:2d:
         4a:42:b7:df:88:01:fc:8a:84:72:f0:97:8b:e9:0d:8e:35:c1:
         14:d5:e6:8c:a2:b5:08:8f:89:58:f8:71:d9:39:52:69:c2:84:
         d9:5e:3e:fd:5a:84:f7:30:f5:b5:4a:8b:4a:1b:69:cc:36:8e:
         ed:2c:56:0d:d8:11:22:e7:9d:61:36:52:94:ad:26:4a:3a:1d:
         5e:f7:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----