Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File:                     x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier:          zlHhCL3OptxD9m3Q3LXRBL8lISzHMwWTD8599ARmPmo=
Subject key identifier:   EF:24:B9:AB:D6:CE:7F:4A:AD:6A:23:61:57:FA:C9:0B:21:D7:7C:DB
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer:       /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial:       01962ECF6FA71E6D1582B582DDE86BFFEF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
                          2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: yMDtNKY6dlgyih3Ni/ss05MgszF7QdvbXII8o6Xeksw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6f:a7:1e:6d:15:82:b5:82:dd:e8:6b:ff:ef:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=ef24b9abd6ce7f4aad6a236157fac90b21d77cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:4e:8f:31:a4:4d:08:49:6d:b0:65:f2:62:
                    5a:e3:62:0d:3f:cb:12:5b:b9:13:d0:8c:8c:5b:01:
                    ae:8e:4c:f3:59:5e:c7:8d:82:e9:8b:1b:66:8e:3d:
                    72:6a:4c:da:c4:52:50:2f:a1:d1:dc:cc:df:da:e8:
                    7b:14:d9:7f:a1:49:44:81:43:83:11:b4:11:cc:2e:
                    b6:b4:43:b2:85:e5:ba:d1:86:a9:2f:21:26:21:af:
                    a1:c8:01:6f:c8:ec:1d:c3:2c:0c:45:70:ab:a2:97:
                    33:6d:8b:1d:39:e8:4f:20:17:a6:e6:3f:2e:cc:5b:
                    1c:6c:85:43:da:17:32:20:44:d7:6b:d7:30:bc:67:
                    65:f1:8f:bf:96:25:72:b2:26:df:41:df:87:02:b3:
                    57:64:74:ee:7d:83:bf:57:cc:b6:1c:99:d0:c5:0a:
                    cb:e2:6a:7c:83:b1:ab:b1:a6:a9:6b:02:22:bb:09:
                    06:10:3c:7e:15:5d:ed:34:fa:d9:64:fd:05:ad:97:
                    e1:c0:f9:63:8e:ee:6b:ce:58:67:1c:e2:ac:0b:a1:
                    de:7e:d4:b2:8c:4d:f9:ea:04:8a:af:15:ab:2d:80:
                    a5:ea:a0:e5:21:bc:f2:6a:98:37:34:f7:cf:df:8a:
                    d9:9c:b5:57:5d:bc:e3:b7:90:78:81:a1:52:4d:1b:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:B9:AB:D6:CE:7F:4A:AD:6A:23:61:57:FA:C9:0B:21:D7:7C:DB
            X509v3 Authority Key Identifier:
                keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:a7:af:b5:1c:44:ef:80:35:ec:e8:4e:3a:b2:09:ad:5e:
         94:25:c9:0a:d4:2b:70:e1:3a:75:f4:99:a8:08:1d:e5:f3:54:
         a2:0f:8c:b6:4c:ac:60:60:11:46:59:8c:2a:9f:05:40:4f:0e:
         80:ec:2d:ec:8c:1e:1b:7b:c6:85:7e:80:16:3c:c9:80:e0:07:
         a7:ef:07:fe:bb:42:2e:7c:09:38:39:e9:72:78:71:94:e3:45:
         16:73:7c:72:95:f0:cd:b1:de:f7:60:6d:c1:af:8b:5c:1e:fb:
         e7:33:04:8f:b8:40:8c:f8:88:e7:52:15:97:75:cf:2c:17:2d:
         31:6d:f6:5a:e7:9a:ed:7c:77:24:7d:ab:b7:a3:ac:4b:27:eb:
         ee:9e:a9:7a:96:ee:48:bc:a9:30:c0:4a:fd:f5:ec:ce:e7:e7:
         b3:d3:49:5d:b2:c4:b8:37:ed:a0:66:94:10:90:63:fc:48:83:
         df:9b:8d:ac:6f:cd:e1:be:28:97:b1:0b:59:1c:ac:86:0b:b9:
         46:bf:08:8b:01:17:5c:28:5a:9e:57:99:72:89:cb:1a:94:02:
         c7:6b:fa:02:3d:19:4e:0a:a8:95:88:2d:b0:77:e0:85:f4:ba:
         23:2f:76:b6:5f:c3:ff:bd:b7:d4:02:62:92:27:4d:3e:da:d2:
         bc:ea:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----