Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File:                     3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier:          hZycGux7pzX5Ywvkon1lPjokSsX/C/VCAkeRv1Y50h8=
Subject key identifier:   6A:E3:F0:1B:E8:AC:C3:84:34:F0:35:F6:0F:66:5D:F3:0E:3C:B1:D3
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer:       /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial:       01962ECFB0CA2AAEA6813154910FEDFCF892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number:          0808
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: wMGiBGgZjYtCkxoCVHYz5s6rKiA/JfCU4ACHRSuXFks=)
                          2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:ca:2a:ae:a6:81:31:54:91:0f:ed:fc:f8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=6ae3f01be8acc38434f035f60f665df30e3cb1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:18:1b:50:53:8e:16:3f:8f:c6:00:fe:41:
                    e7:a1:a0:69:4c:cb:9f:dc:f5:98:d5:34:91:a3:f8:
                    05:90:ae:0a:9f:13:af:74:f9:d6:26:43:60:81:b6:
                    00:a1:8a:6b:5b:fe:27:ee:b4:0c:23:48:ec:a4:65:
                    5b:d8:bd:01:2c:d9:f0:57:03:7a:63:06:2b:53:98:
                    ab:2c:d6:31:dd:b4:0d:0f:bd:d6:7d:17:05:12:75:
                    8f:ac:56:2d:01:b3:1e:3f:12:35:5d:26:0d:5c:f4:
                    b0:72:00:bc:ef:c4:e4:b4:64:81:24:d7:19:c0:5d:
                    df:ca:88:3f:a7:c7:76:17:bd:9e:42:e5:33:da:f4:
                    07:c5:98:0b:8b:d2:14:c8:cd:fc:3a:c6:3b:7d:dd:
                    d8:ab:27:e9:c4:5f:64:b8:1e:77:e1:e3:23:03:05:
                    9d:89:bb:2a:59:ac:9a:0f:13:4c:b5:e4:d2:2f:13:
                    cd:92:3c:15:dc:1d:91:a0:ab:62:e7:ed:7c:51:5e:
                    e8:66:f1:67:89:a2:7a:8f:d7:f5:b0:7e:ae:56:26:
                    ed:1d:04:db:75:98:79:85:28:50:93:cc:c8:0c:85:
                    8a:38:92:2d:dc:35:97:9a:a8:8d:62:9a:2e:d0:15:
                    3a:0e:db:70:73:68:ab:89:c2:65:d3:8c:b7:c6:6c:
                    b3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:F0:1B:E8:AC:C3:84:34:F0:35:F6:0F:66:5D:F3:0E:3C:B1:D3
            X509v3 Authority Key Identifier:
                keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:80:59:dd:5a:dd:4b:33:ca:09:29:dc:95:67:18:c5:32:01:
         85:dc:4a:95:48:af:95:7f:ff:ae:94:53:b0:0b:ba:cf:1c:e8:
         02:e0:81:5b:55:27:cb:ef:9d:57:57:3e:de:1c:c5:bd:cc:ca:
         c0:1f:d2:23:cc:76:97:5d:b8:04:b0:9e:73:dd:61:ab:27:11:
         1a:b8:b6:44:69:69:5d:3e:f8:06:63:70:13:6d:0f:8f:59:7d:
         24:30:64:f5:4d:b6:7e:6c:ae:9f:b8:84:f4:b8:8e:b0:a7:63:
         e0:67:fd:7d:0f:ca:4d:7c:82:a7:d9:72:2e:dc:8d:4d:c2:cc:
         cd:e4:94:2f:5a:d0:3e:e5:ed:3b:4b:de:d4:26:e5:fc:38:4e:
         2a:a5:40:b6:38:97:63:17:43:71:1b:4e:79:4b:ae:6b:2f:7e:
         38:64:21:b3:b8:a8:bb:36:97:a8:4e:b0:5e:03:ff:e5:c1:05:
         63:ad:e0:1f:91:df:ed:5e:2d:f6:35:dc:4e:0a:a5:5a:de:b8:
         29:96:5c:50:43:e5:b4:fe:f6:92:fc:c4:78:93:8e:59:18:94:
         9c:c2:c3:bc:91:14:21:b9:c3:f3:a1:97:19:0f:d0:09:34:b2:
         cd:fe:20:40:86:02:0c:38:04:72:95:d6:2b:ff:2c:9e:b7:6d:
         56:76:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----