Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
File:                     3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json)
Hash identifier:          R8BQNXTqQpnQFxWQ+hwP7/UhUSoTvuKdMcq0GPBB+8k=
Subject key identifier:   D4:A4:F4:54:DA:F2:8C:D6:E9:C7:A0:C6:9C:24:E6:F4:BD:2A:65:F5
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Certificate issuer:       /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial:       01962DF44AB9DFA04D6871F1B65790B0668E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
Manifest number:          145C
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: qT4CcnW2EPrg7okkY0NlezmC3Ug9wlW+32nIwCibo9o=)
                          2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=)
                          3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=)
                          4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=)
                          5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=)
                          6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=)
                          7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=)
                          8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=)
                          9: H2lVKMz_X46KFKjX_6x9tvmH1uE.roa (hash: RB7IG/Ldoyl84GgxDa9yMrGgoraAfien6HZCweyoCaw=)
                          10: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=)
                          11: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=)
                          12: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=)
                          13: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=)
                          14: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=)
                          15: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=)
                          16: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=)
                          17: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=)
                          18: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=)
                          19: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=)
                          20: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=)
                          21: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=)
                          22: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=)
                          23: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=)
                          24: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=)
                          25: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4a:b9:df:a0:4d:68:71:f1:b6:57:90:b0:66:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=d4a4f454daf28cd6e9c7a0c69c24e6f4bd2a65f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:ec:3f:aa:75:14:a2:0a:94:97:c6:7e:cc:
                    da:70:d9:c0:bc:6c:ea:b6:21:b7:61:93:36:48:f9:
                    f8:39:1c:a3:39:59:70:0c:e2:87:e8:bd:93:40:47:
                    c9:6e:a2:db:89:38:61:59:4f:7f:ac:cb:6c:37:e8:
                    bc:ea:3a:cc:6a:e9:e0:71:6f:19:a9:ec:d3:4c:c2:
                    30:6d:fc:b2:cf:d5:30:77:d4:c9:d1:92:16:6e:0f:
                    c0:ce:28:0f:5a:bc:c0:68:c7:e1:3f:3b:76:26:e9:
                    28:43:ff:8a:07:91:81:be:82:ff:35:f3:03:34:c8:
                    3c:c3:54:2a:55:1c:7b:9a:c5:9c:1c:2d:b4:03:0d:
                    3c:6e:2b:ab:e0:d6:53:96:fc:bb:22:9a:c9:11:37:
                    43:45:ce:d3:2a:f7:e7:eb:1d:73:86:69:df:a3:2b:
                    4d:57:af:05:d0:55:77:07:cb:ac:c3:f6:0c:d0:df:
                    cc:9c:89:fe:3c:1c:92:25:21:02:7e:c3:ca:1f:5e:
                    c9:63:d4:04:24:ba:92:bd:0d:47:e9:d6:2a:35:d4:
                    45:33:92:d2:4d:6d:05:f5:6c:59:bc:31:5a:3a:89:
                    15:e2:c1:13:b7:8d:ca:00:e5:47:c7:4f:e9:5f:18:
                    85:1a:92:10:d2:ea:db:4d:56:fb:8f:42:52:2a:e4:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A4:F4:54:DA:F2:8C:D6:E9:C7:A0:C6:9C:24:E6:F4:BD:2A:65:F5
            X509v3 Authority Key Identifier:
                keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:5e:c0:cc:c8:94:21:5a:5e:8e:aa:2c:c1:b5:fd:fc:40:c0:
         91:c0:e2:c2:8c:eb:4e:bf:4e:f7:95:c7:bb:f0:8d:64:05:c9:
         a6:97:38:08:52:3b:f0:55:c5:1e:29:cb:87:5f:5c:a2:be:d5:
         2b:6e:8d:b3:70:ad:ef:4b:cc:8f:0a:b1:96:c2:8a:54:8f:3c:
         c9:0a:96:7b:16:cc:f2:4b:67:9b:ae:20:4c:ba:32:ea:75:0b:
         58:4c:1b:6b:6d:07:03:8d:92:d3:cf:ca:46:09:7b:ee:66:5f:
         2d:d5:b4:ef:16:22:f2:29:d3:76:7d:5c:21:b3:e5:2d:30:1f:
         0c:2f:ab:70:e0:84:ee:33:3b:29:2e:1d:a3:a8:fb:ea:1f:2d:
         ff:56:2c:ae:50:be:5c:0a:8d:5a:c5:48:f1:ec:f9:bb:c0:87:
         6e:72:64:4d:78:ac:66:bf:5d:13:b7:a8:fe:ca:b1:f3:e9:80:
         99:30:90:36:e4:a5:2d:95:00:ee:98:1a:86:fe:89:89:02:62:
         c0:86:d4:cf:7d:24:2f:b1:46:51:ca:a4:0f:83:2b:5d:9c:ea:
         22:fd:0d:ff:4c:21:cc:b5:3c:b3:86:b6:e8:d1:a0:60:3c:7f:
         03:07:8b:aa:d5:f4:39:33:e3:21:04:02:cf:43:c9:0d:c3:b3:
         cf:2e:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----