Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          RjTYhnjSUgApLjhwe69wLDzekiho7MH1ZtWWQY+bZVk=
Subject key identifier:   34:92:FE:15:93:96:12:D3:88:91:A6:47:3C:C0:36:4C:B5:C2:E7:B6
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       01962E98F94293D9BEBD4ACDC0D36B944964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          0562
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: A8shBnzCdNz1nj9duFNS3lHDDwtilCYlEGosyaOzXDw=)
                          2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f9:42:93:d9:be:bd:4a:cd:c0:d3:6b:94:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=3492fe15939612d38891a6473cc0364cb5c2e7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:88:4a:b9:da:0b:40:e1:74:6d:52:71:4f:
                    4e:e5:b8:7d:40:34:41:85:4d:3f:03:5d:e2:7f:f0:
                    a3:a3:8d:78:66:53:33:a0:ef:3b:61:5d:41:ca:bd:
                    f6:19:4a:a4:76:98:b6:11:38:ce:37:d7:7a:8d:79:
                    eb:9a:d0:e0:f3:4e:8e:72:6e:a7:5a:b4:eb:ac:89:
                    5a:6f:55:2d:72:60:5c:8f:44:5f:9e:4f:a8:4b:99:
                    ad:42:d2:25:57:05:ad:b0:87:f6:42:00:24:a4:93:
                    65:1a:2f:e4:73:f8:6a:d4:59:d7:df:8c:2a:4c:d5:
                    9e:4b:9c:9e:5d:3a:64:d7:b6:44:17:36:43:d1:d9:
                    c1:6c:9e:19:fb:1b:72:2c:b2:cf:1d:71:f6:bb:c6:
                    39:40:0f:81:0f:c7:ef:ab:78:57:f4:e2:ca:3f:5c:
                    9f:c6:5a:b3:f8:ce:23:ac:1b:2f:c4:37:b2:b4:5a:
                    01:7a:3a:46:d0:f2:0b:87:cd:0a:cb:12:dd:35:8d:
                    b4:0c:a1:87:55:4b:ad:59:b8:c5:0c:b4:02:7d:cc:
                    ce:cf:4b:6b:dd:4c:b1:66:e4:66:5e:05:9a:74:b4:
                    ce:93:c5:35:59:4c:b9:5c:ab:26:77:a1:41:ea:51:
                    57:5f:fd:56:c8:26:f5:40:b2:b4:c4:84:c3:ee:14:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:92:FE:15:93:96:12:D3:88:91:A6:47:3C:C0:36:4C:B5:C2:E7:B6
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:4b:31:95:c6:46:f8:66:f7:75:d6:8a:d4:4f:fb:37:32:
         29:89:72:57:eb:01:da:cd:8b:44:cb:0b:9d:7f:fa:29:27:1c:
         5d:f0:95:ba:d7:79:d3:5e:b4:0d:35:9a:42:29:75:7e:02:96:
         e7:02:23:45:27:99:dc:0a:8a:0b:08:5e:dc:06:8a:2e:ad:47:
         a8:3e:03:a1:d3:84:2f:d6:12:2a:e5:7f:29:73:7b:ae:f9:cb:
         24:ac:3a:31:7f:21:4c:5c:86:97:c2:ea:46:68:0e:5a:07:a0:
         80:dd:fe:11:ca:6b:bf:7e:0e:ea:22:cc:31:b2:68:07:cd:de:
         fd:86:70:a0:a4:fa:7c:04:4d:fc:cd:7f:5c:9b:93:be:c1:f8:
         77:29:ec:ad:4c:56:39:32:a5:ab:c5:4a:ba:12:75:ab:15:a5:
         79:06:b8:7c:34:94:4b:b2:8b:ec:f7:96:15:df:b2:00:4f:c7:
         dc:70:89:7b:68:31:d4:68:07:10:0e:ef:78:f2:81:e2:a5:9c:
         3c:1c:f2:48:8a:74:64:c8:47:a6:82:02:bb:13:61:9b:b7:9a:
         d5:13:a9:2a:3a:d6:6c:59:11:4e:31:a4:ef:b9:29:dd:cc:71:
         f2:90:88:5f:6d:05:0b:f7:fa:68:94:b2:7d:88:b9:af:19:d9:
         04:69:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----