Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File:                     3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier:          fhFhSxPYnwPIL9pVbYNM/0+/DL3TERHVoz/MMzPWJNY=
Subject key identifier:   38:B2:FB:DE:DC:00:7F:B0:72:CA:8E:0F:FB:EA:98:D1:79:29:3E:EB
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer:       /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial:       01962ECFD731EE04BE3F08C0DBE52AFD6961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number:          14C6
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: XVNYIWreYTit9aJaWCrRhGIpnH28odacSmpJYXAGB2M=)
                          2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:31:ee:04:be:3f:08:c0:db:e5:2a:fd:69:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=38b2fbdedc007fb072ca8e0ffbea98d179293eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:a9:1e:12:8e:04:c8:64:4b:12:7f:e8:82:
                    52:6c:12:e9:8f:ae:db:3c:a5:cf:bc:d7:a6:a3:20:
                    76:6a:33:be:a3:f6:35:e3:98:a7:d7:8e:ed:1c:bd:
                    7e:31:87:32:c3:3a:35:d1:52:51:5f:ab:47:19:25:
                    c7:0f:12:1a:df:6f:89:b8:9f:70:9a:30:2d:31:a3:
                    86:6d:82:72:68:41:00:ce:ac:14:16:a0:34:c9:40:
                    5d:98:9b:1b:9f:04:c2:e6:dc:5f:06:dd:69:fb:d8:
                    6a:53:90:d2:0e:90:ae:97:c4:93:55:81:1c:47:3c:
                    76:54:19:61:9c:a3:d2:86:21:71:7b:17:4e:81:82:
                    29:04:21:47:de:8b:f9:31:82:0a:71:cf:a8:38:bb:
                    ad:93:ea:05:9b:ef:d1:3e:6f:e3:28:5b:9d:5b:b2:
                    1f:bb:53:40:61:fa:14:c3:64:cf:4b:f1:d2:d5:c9:
                    c1:31:64:56:2d:aa:96:f7:9a:c4:42:3e:76:a3:6c:
                    87:6c:ec:d2:e7:c9:ad:b6:55:c7:95:42:c2:71:50:
                    36:36:da:28:76:44:03:fc:59:ab:70:a3:b6:18:dc:
                    e2:38:1c:11:c8:8a:18:06:b8:a3:ef:9f:df:6c:f1:
                    c1:79:8d:e4:1b:bf:59:cf:63:db:8f:6f:28:44:69:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:FB:DE:DC:00:7F:B0:72:CA:8E:0F:FB:EA:98:D1:79:29:3E:EB
            X509v3 Authority Key Identifier:
                keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:55:26:ad:e6:0b:f0:b7:da:b2:9b:6e:6f:eb:15:5f:76:33:
         d7:c4:22:7a:89:46:aa:ea:bb:4b:72:8f:28:91:7c:fa:e7:38:
         78:d6:2c:3f:2a:d7:45:5e:8f:a3:01:74:96:d9:d5:39:16:7b:
         d7:8a:07:29:59:e4:e5:b0:fc:f4:e3:73:f6:e2:1d:b2:f5:6e:
         8c:07:da:ae:7e:b3:f2:6e:c9:1b:eb:9c:12:d9:0f:0d:8b:68:
         6b:5a:e8:50:ff:e3:f2:bb:4f:09:bc:fd:2a:91:5c:15:93:df:
         58:f8:65:e1:8d:d1:60:47:03:95:4a:07:ae:36:60:e7:9f:04:
         5e:d0:d9:00:3a:34:22:6b:d5:3f:eb:20:c5:02:b0:1e:90:a5:
         3f:f1:bd:4f:81:7a:8b:4d:43:8a:98:3a:7e:4a:46:d5:24:41:
         2f:0a:b6:69:63:65:5a:2e:69:82:f1:16:c3:70:bd:41:d7:8f:
         cc:6b:5e:e3:40:63:37:7c:4b:24:ee:aa:4e:6c:2f:d2:8d:00:
         fe:80:36:a1:55:fa:32:c1:c5:88:2f:e6:af:1e:88:bc:e4:7f:
         6b:97:7a:63:5e:af:e8:fe:92:c6:18:92:f4:4a:06:c8:1f:92:
         98:e2:35:50:fc:15:bd:c2:cb:3f:e0:1f:2c:c6:e2:7c:9e:6b:
         89:52:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----