Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          vUEk6KdCPos3CRL8+6OZfjkigVyyG/tjLZd9xE1Ho+g=
Subject key identifier:   03:8B:70:BE:3A:27:3E:3C:52:3C:49:83:1F:FB:F9:8C:2C:12:77:78
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       01962F74D1FA25C9D8C3350E959EC8160D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: /EJGClSx10zye0aUt+tRofuYGCw9zdCpq0o26o7jg3c=)
                          2: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (hash: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d1:fa:25:c9:d8:c3:35:0e:95:9e:c8:16:0d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=038b70be3a273e3c523c49831ffbf98c2c127778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:ef:82:ba:91:d0:1a:b9:09:17:96:e6:44:
                    dd:4c:6c:91:c7:6a:cb:13:68:96:c3:ea:1e:d1:e0:
                    93:1c:c8:16:47:f1:4f:c1:5b:78:a3:67:6c:b6:ee:
                    f8:ae:47:70:f0:08:3e:2d:c2:4f:e9:b0:7b:82:6a:
                    41:db:89:ad:a7:a0:3d:1c:af:db:f2:f9:42:e9:27:
                    2d:c1:58:ce:35:83:a3:78:50:cd:f4:91:1b:03:1c:
                    63:e2:20:b9:42:2b:89:6a:d8:4e:fa:8e:dc:23:6a:
                    82:74:08:98:f9:41:63:41:59:1f:89:ee:a4:4e:38:
                    c0:25:07:11:2f:1b:a0:a5:29:b1:3f:f5:73:f4:e8:
                    b1:b0:dd:b6:43:a9:3e:b1:2c:58:0e:88:57:db:92:
                    57:80:95:3c:8e:55:52:a8:75:b6:e2:4c:98:84:19:
                    75:cf:f6:4c:d6:fe:a8:1b:9e:8c:f8:bf:94:92:f9:
                    9f:2f:bb:15:1d:84:fd:f2:58:38:c8:51:e8:cd:f3:
                    93:bb:5c:35:1f:f6:4e:81:24:07:e9:f2:dd:00:be:
                    d1:ab:da:e5:36:91:57:14:3a:c7:89:ec:b7:4d:c3:
                    05:b0:cc:b9:c7:2d:0a:1e:a1:bd:ec:48:f1:a3:30:
                    40:a0:2a:82:a8:f1:e9:ee:0b:2d:25:0d:98:93:fd:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:70:BE:3A:27:3E:3C:52:3C:49:83:1F:FB:F9:8C:2C:12:77:78
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:d6:d2:fe:04:c2:df:91:ef:48:24:54:9c:60:d1:09:b8:
         cf:bc:05:62:fd:c8:31:49:a0:d4:1e:de:ad:0e:80:19:ed:be:
         f9:0c:69:2b:71:bf:cf:8d:bb:ed:d5:11:59:66:51:cd:cd:2c:
         54:f8:f9:5b:ec:23:51:82:f0:92:94:f4:82:80:56:07:80:1b:
         2d:e6:80:bf:a8:ba:5b:3b:09:de:f0:e9:22:f8:f6:0a:9d:2f:
         6b:17:6e:b9:ef:6f:55:60:5e:00:0d:63:8a:55:e8:25:1a:2a:
         88:4e:c8:67:95:bb:37:1b:59:ec:23:39:5d:e7:ae:e4:ce:83:
         49:48:73:32:28:37:89:42:08:e2:b3:0d:6b:44:1c:f1:79:8a:
         9b:38:bd:d4:fd:57:89:ba:c7:d0:e8:29:98:bd:d0:b6:50:fa:
         2d:ee:75:1c:5d:e4:48:57:14:cd:be:bc:99:76:a2:9e:b2:a0:
         bb:fe:98:f6:61:f0:01:38:6a:40:9f:0e:65:1d:f4:e8:47:af:
         cd:c5:89:87:03:5d:31:7a:fa:16:b1:14:ab:05:fb:f2:ca:21:
         b6:10:4a:01:78:f2:a8:37:08:1d:7e:70:7a:5a:a1:0a:67:b0:
         3a:7c:5d:db:41:24:07:32:44:b1:0b:6d:7c:9c:66:50:57:a2:
         b5:cd:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----