Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File:                     3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier:          0JxOPVWt7kV2i3ePB1WivwBD2YklhITUzbaua2ymmvk=
Subject key identifier:   97:12:A1:51:5D:6A:A4:56:EB:6C:48:9E:F9:9D:35:99:10:54:92:FE
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer:       /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial:       01962DF3B469F1917102886F37E4CAC7BB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number:          02EE
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: RDW98eZXTsCEykXjcfn2zZ36enHwIJt0yqvGMXtFl+M=)
                          2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:69:f1:91:71:02:88:6f:37:e4:ca:c7:bb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=9712a1515d6aa456eb6c489ef99d3599105492fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:48:56:9b:32:61:fd:d5:72:7c:a6:1a:9e:
                    2c:e8:27:14:5f:a6:80:9a:27:55:ff:a0:74:32:4d:
                    13:43:5a:87:40:de:2c:88:77:c8:de:06:19:94:15:
                    bb:35:33:a6:8a:46:8b:31:e3:89:79:61:80:35:58:
                    8a:66:55:81:af:05:4a:3f:b5:ad:13:0d:40:66:e2:
                    8b:67:be:17:ad:e0:3d:2c:4e:04:d5:4e:68:77:5f:
                    01:5e:bb:7c:34:69:79:8d:18:75:ac:44:d4:1b:d2:
                    9d:a3:9d:01:dd:d7:34:d4:7a:8f:d3:7d:1d:7f:89:
                    34:6a:34:24:ea:40:f9:82:7d:14:1e:d7:72:66:c0:
                    79:60:83:97:fe:8b:15:61:36:0a:79:62:44:39:73:
                    68:c8:43:fd:b4:eb:a8:24:c1:84:2f:75:1f:ad:05:
                    40:33:df:c7:f0:04:c3:bb:82:97:9e:c0:9d:ea:e0:
                    90:bd:4a:70:89:de:61:d4:16:c8:ed:80:a5:22:e0:
                    5e:33:62:60:43:ab:f8:66:1c:ff:92:4e:85:ad:93:
                    ea:08:f8:f4:9d:85:81:0b:94:e8:7a:13:fa:62:df:
                    b3:90:3e:e7:9d:72:e3:6a:95:a8:3a:b1:cb:bd:5d:
                    42:1f:05:e1:35:9d:d3:51:3f:ac:ec:b5:f3:3d:ce:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:12:A1:51:5D:6A:A4:56:EB:6C:48:9E:F9:9D:35:99:10:54:92:FE
            X509v3 Authority Key Identifier:
                keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:6b:3f:e3:9c:f7:25:c7:d7:4b:fb:55:41:e2:f8:76:4d:
         ef:2a:00:80:7e:71:99:8a:70:f9:5a:12:a0:c8:0c:ee:ea:d1:
         44:cb:60:60:ed:98:4d:e5:8c:0d:c1:f2:83:ce:9d:af:2f:4c:
         ab:ba:4e:0c:fc:d3:bd:f9:eb:06:c5:bc:cf:0d:c1:df:48:c0:
         8f:d0:5a:55:ad:91:dc:10:57:d3:eb:37:fe:b0:52:a1:82:50:
         39:0f:bb:74:7e:1e:f8:6b:a4:7f:77:46:f6:1b:3f:63:21:3d:
         3e:ff:b1:e8:27:bb:a1:eb:90:38:bc:d8:42:46:ea:02:63:dd:
         40:f8:28:47:fe:ee:b4:2f:69:a5:7b:ec:f6:bb:74:4a:cb:6c:
         21:61:52:e5:f6:51:65:65:61:23:df:0a:23:05:e0:12:47:2c:
         d8:cf:43:b2:44:d8:84:18:d8:a6:3c:75:2d:ba:05:27:d5:50:
         41:73:20:d8:2c:f9:e4:ff:49:13:79:15:79:61:63:ce:f9:76:
         74:b3:4f:71:b4:de:bf:f9:4a:54:e2:13:60:dd:5b:d3:80:b4:
         e0:9b:ac:23:3a:60:e1:96:0d:7c:a8:6a:a3:82:54:ca:39:cd:
         57:e7:a8:37:58:39:00:b3:0e:2d:5a:c6:36:0a:39:98:ec:b7:
         8c:c7:ad:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87Rp8ZFxAohvN+TKx7sbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjUwNDEzMDcwMTA4WhcNMjUwNDE0MDcwMTA4WjAzMTEwLwYDVQQD
Eyg5NzEyYTE1MTVkNmFhNDU2ZWI2YzQ4OWVmOTlkMzU5OTEwNTQ5MmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ1IVpsyYf3VcnymGp4s6CcUX6aA
midV/6B0Mk0TQ1qHQN4siHfI3gYZlBW7NTOmikaLMeOJeWGANViKZlWBrwVKP7Wt
Ew1AZuKLZ74XreA9LE4E1U5od18BXrt8NGl5jRh1rETUG9Kdo50B3dc01HqP030d
f4k0ajQk6kD5gn0UHtdyZsB5YIOX/osVYTYKeWJEOXNoyEP9tOuoJMGEL3UfrQVA
M9/H8ATDu4KXnsCd6uCQvUpwid5h1BbI7YClIuBeM2JgQ6v4Zhz/kk6FrZPqCPj0
nYWBC5ToehP6Yt+zkD7nnXLjapWoOrHLvV1CHwXhNZ3TUT+s7LXzPc4NkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcSoVFdaqRW62xInvmdNZkQVJL+MB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYFrP+Oc
9yXH10v7VUHi+HZN7yoAgH5xmYpw+VoSoMgM7urRRMtgYO2YTeWMDcHyg86dry9M
q7pODPzTvfnrBsW8zw3B30jAj9BaVa2R3BBX0+s3/rBSoYJQOQ+7dH4e+Gukf3dG
9hs/YyE9Pv+x6Ce7oeuQOLzYQkbqAmPdQPgoR/7utC9ppXvs9rt0SstsIWFS5fZR
ZWVhI98KIwXgEkcs2M9DskTYhBjYpjx1LboFJ9VQQXMg2Cz55P9JE3kVeWFjzvl2
dLNPcbTev/lKVOITYN1b04C04JusIzpg4ZYNfKhqo4JUyjnNV+eoN1g5ALMOLVrG
Ngo5mOy3jMetkQ==
-----END CERTIFICATE-----