Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          qG53+6Iu/VH1MRzckJR513YtGfY6zPrPNzMY5oLp2W4=
Subject key identifier:   2B:F2:77:62:8A:61:E8:63:6F:78:00:20:F6:E5:6D:7A:73:87:44:1C
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       01962E98A054154CC2AAE7C0E388CA193301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: Z7j6qsLBdGM0//5QejnQn8iIhep02CqW36pqx65gI0g=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:54:15:4c:c2:aa:e7:c0:e3:88:ca:19:33:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=2bf277628a61e8636f780020f6e56d7a7387441c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:62:05:5e:da:82:15:7b:55:b6:7a:1f:a7:
                    38:b7:15:d7:de:95:84:aa:2f:0c:7f:f6:81:73:e2:
                    f4:4b:cb:88:af:a3:80:f5:f2:33:c3:ca:e0:82:85:
                    13:2a:03:ff:eb:74:ff:fa:28:c6:06:8e:2e:a9:ed:
                    d7:8c:2e:e5:d4:b0:6e:87:31:9d:61:fa:6e:51:4c:
                    94:03:37:7f:5a:68:c0:de:92:b0:c7:99:89:dd:c9:
                    82:5c:7f:af:fe:b2:a2:0a:a6:07:11:be:ef:7f:ef:
                    2f:01:41:7e:09:a1:83:10:92:a3:c6:da:d2:d1:9d:
                    29:ab:1f:96:fb:ca:c0:3f:51:67:1d:89:a6:d8:aa:
                    f8:8b:fd:aa:67:27:92:df:30:59:88:db:31:c2:d6:
                    6f:02:d3:ba:63:ab:41:2f:04:08:c9:4f:39:84:12:
                    5a:18:fe:ce:be:8b:0e:12:2f:1b:4e:50:ec:3c:9c:
                    2e:66:02:53:38:7d:90:1f:2a:bd:ee:5f:56:91:63:
                    af:0f:11:6f:1f:4e:42:a9:cb:81:da:20:cc:3c:00:
                    b5:b0:89:4b:bf:b5:d4:f3:ed:ef:4d:64:b6:ad:ec:
                    53:68:11:f7:bc:98:14:95:6e:96:05:41:b7:86:54:
                    f2:b4:ba:dc:ff:63:78:79:4e:3f:9a:7d:cd:63:08:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:77:62:8A:61:E8:63:6F:78:00:20:F6:E5:6D:7A:73:87:44:1C
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:12:5a:76:dc:89:1a:84:c9:b0:84:77:04:b1:0f:e0:69:df:
         12:31:13:71:d7:cd:06:60:40:3e:d7:55:b9:3c:74:c8:dd:0d:
         8d:c1:68:e4:c6:ea:23:aa:54:ea:c4:3e:2a:01:3d:f0:5c:f7:
         10:20:bb:ad:cc:fa:d9:00:6d:99:0d:a3:ad:81:f1:9a:fc:85:
         13:ef:74:9e:90:86:86:77:8e:b8:8d:1b:15:08:b3:47:7c:92:
         48:ab:8d:fb:15:f5:ff:76:49:8e:b8:f7:b1:0f:3b:15:70:11:
         f7:3f:51:53:7d:de:09:f5:de:ef:43:27:00:cf:fd:11:b4:6d:
         1b:61:40:6b:73:28:1c:53:01:e0:a6:f2:a8:7e:e5:e9:d4:61:
         de:8a:5c:b7:ed:13:9a:71:27:7e:83:ed:e1:a7:60:6a:f7:11:
         1f:0d:bb:9c:2e:5c:bd:10:70:22:a5:87:a5:70:53:08:15:24:
         3d:2c:49:0a:d1:8c:ab:9a:96:45:f7:75:42:80:95:a2:ef:53:
         3a:a6:0a:01:cf:2f:fb:8b:f4:d3:5a:84:ec:3d:92:b4:d7:65:
         31:92:70:c1:50:67:be:36:25:da:e5:be:68:1e:73:2b:76:ed:
         d3:5a:c9:8c:df:f9:c5:f1:fd:1d:84:6d:cb:7e:db:c3:ba:74:
         55:8e:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----