Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
File:                     PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json)
Hash identifier:          nSy6BSVJm7IMcAYgBSrCv7XCJcLNcNV7jqKtRHXvTgA=
Subject key identifier:   34:07:3B:7C:71:08:BF:06:DE:A2:EA:70:09:51:47:A0:4F:77:F1:17
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Certificate issuer:       /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial:       01962E991618DF0250C7CBAB9AE32061CDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
Manifest number:          0DF1
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: EM9slSLSF+5bRtElt8xuHtBkJ2w+Yz+wr/xPcX57UQk=)
                          2: nMra-Jnuy1-KF59c3gHNl4k3BGo.roa (hash: E6H4x/vSs6tKPKP20pzl8TJ2cP6miiiqM+CoQMRhnI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:18:df:02:50:c7:cb:ab:9a:e3:20:61:cd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=34073b7c7108bf06dea2ea70095147a04f77f117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:a9:18:54:75:57:f0:cc:7a:20:53:85:b7:
                    6f:80:65:c0:2f:d8:75:09:76:ba:fa:5e:2c:d2:da:
                    93:4b:9f:15:1b:9a:83:98:4c:fc:a9:e8:04:51:89:
                    46:05:48:7a:fa:49:14:b4:c1:9b:96:38:b7:af:cf:
                    82:81:67:d1:33:b7:72:e1:4b:86:7d:6b:88:2b:d6:
                    2b:9e:d9:3a:92:e1:f8:55:20:b0:16:85:49:76:86:
                    bc:7a:f3:45:99:cf:06:03:21:12:93:05:f3:57:24:
                    c3:13:41:c0:ec:34:ce:5c:ba:63:fd:e5:53:dc:94:
                    13:60:2b:50:5c:b8:65:da:11:bf:8e:ee:3e:fa:f8:
                    ee:35:b0:95:a9:72:b7:c6:d8:58:65:54:ad:8a:7d:
                    16:7a:d3:ee:9b:8c:3a:50:de:d8:76:ce:4e:16:85:
                    00:e9:80:dc:8d:33:9c:e4:96:b3:65:fe:02:a9:0d:
                    82:20:19:1a:cf:09:c4:9e:9c:75:19:cf:64:9e:19:
                    79:84:1d:b9:3e:6b:2d:e4:dd:7f:8b:ee:d8:2d:3a:
                    9c:7c:2e:a3:65:ad:c5:04:ff:83:f6:2b:43:a9:06:
                    1b:30:63:32:c6:05:58:ac:01:1d:79:4c:c8:15:68:
                    b8:63:b6:d8:64:63:2a:a6:61:77:f3:43:f8:7a:ba:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:07:3B:7C:71:08:BF:06:DE:A2:EA:70:09:51:47:A0:4F:77:F1:17
            X509v3 Authority Key Identifier:
                keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0e:a2:52:a8:bb:63:07:05:d2:07:cd:55:71:88:63:98:00:
         15:fb:73:08:d8:73:a8:7e:46:73:f1:63:82:be:53:0c:96:e3:
         19:23:7d:e8:03:3b:9b:c6:74:66:21:98:ee:a3:76:e4:52:a6:
         ff:4b:6e:3a:b2:9a:6a:09:ae:35:b3:0b:05:67:76:15:a5:26:
         a6:dc:33:96:b4:1f:b9:19:b0:ce:b2:d7:c3:f5:23:58:9e:8c:
         e2:29:ef:7c:8c:e2:91:68:f1:1b:cf:1d:1b:05:00:77:c6:8a:
         a5:2b:89:12:d3:7d:e4:f6:3e:3f:4a:ca:6c:e5:94:43:01:b2:
         4d:a3:70:ca:c3:68:34:fc:b1:10:3f:8d:a1:89:92:1c:a9:aa:
         e4:a7:f5:d1:0d:79:2d:f4:15:c0:3c:db:e1:d6:4d:95:08:37:
         a6:6f:20:e8:c0:89:87:56:8b:19:c0:ca:8d:9a:a8:d5:59:46:
         4f:e8:5a:2d:d1:b2:16:d3:2c:de:3d:33:3e:8f:1b:18:87:3b:
         17:68:8d:cc:bc:8e:cc:ff:f1:9e:a0:a5:6d:a0:dc:a0:71:b7:
         25:77:ae:20:1d:3b:c1:d1:eb:95:15:10:b7:53:0d:9f:5e:81:
         ac:a5:1b:34:87:2b:e5:41:fe:bb:93:6d:d6:29:cc:45:69:ea:
         81:ed:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----