Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File:                     3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier:          ItfPRHZbNI4O6dDtoFV159TznaJ8NZitkzfCA/iU8Lo=
Subject key identifier:   48:D1:A3:8E:8E:97:AC:98:EF:C4:27:3D:EB:EF:4F:DC:3F:0B:32:4F
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer:       /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial:       01962F3DA86962316354CE20CAA41EC4A5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: 83hfjjFxXAMFJHBAF+9fjU/IylZ2+1Cf2jxeg68cumg=)
                          2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a8:69:62:31:63:54:ce:20:ca:a4:1e:c4:a5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=48d1a38e8e97ac98efc4273debef4fdc3f0b324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:92:61:85:6a:1a:12:4a:24:de:8f:22:48:
                    6e:31:a6:16:fc:2c:ac:8d:24:71:10:a4:e2:de:4f:
                    17:e4:3e:77:24:0a:07:35:cc:93:a9:51:d7:97:26:
                    ae:d8:3a:92:2f:26:7e:ef:a2:ed:11:f9:3a:23:41:
                    a0:d3:fc:65:a8:11:fb:89:67:ab:c0:bd:5a:34:68:
                    4d:ee:f2:19:d4:51:c1:7a:83:f3:b2:f5:74:6f:92:
                    c4:71:a3:6d:34:da:b3:ae:2a:cb:16:3f:9e:f2:3c:
                    fb:b8:f8:bf:46:90:af:43:ba:b7:05:25:d3:f7:45:
                    87:b5:a5:c1:4a:c4:dc:68:0a:f4:f0:5a:b4:bc:0a:
                    08:b6:e9:ff:27:33:86:6a:48:8e:a6:97:60:50:2b:
                    8d:fc:29:1a:42:40:a8:84:30:ac:0e:be:62:66:23:
                    ab:45:6c:45:f1:8c:37:3e:89:3e:c4:de:c0:c3:bc:
                    f2:a8:5f:08:31:93:4f:cf:97:3c:48:65:50:c6:82:
                    07:59:ee:e0:98:2d:0a:ca:0f:3a:c1:8b:d1:89:ae:
                    0b:f7:9d:70:b3:b8:e7:af:7e:34:20:7b:9f:3f:62:
                    4b:a7:c5:c6:e1:8e:94:60:38:84:70:89:6c:ff:2f:
                    c4:5d:57:00:ef:b4:4f:16:10:5a:a9:05:dd:33:6d:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:A3:8E:8E:97:AC:98:EF:C4:27:3D:EB:EF:4F:DC:3F:0B:32:4F
            X509v3 Authority Key Identifier:
                keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f1:22:28:f9:19:b4:d3:6e:c4:ed:dd:8e:d8:6d:9a:f8:f3:
         3d:5a:69:54:df:cf:db:e9:ad:b4:c0:1b:1c:8a:83:84:71:f0:
         25:89:1e:2f:0d:db:15:e9:03:7b:4a:18:f7:f2:2f:2e:0d:82:
         21:05:3e:eb:8c:71:24:06:56:65:6d:8a:73:01:b5:41:69:8e:
         f2:ac:ba:41:6a:17:c7:99:23:c3:23:a4:46:c1:e3:1c:54:48:
         20:bb:ae:51:35:34:0c:ca:26:52:57:2d:a8:ee:80:a0:09:14:
         d7:fd:b5:3d:b0:8f:39:26:a0:c2:2d:aa:01:60:b4:70:54:4c:
         2e:ba:b7:e7:db:8a:b4:fc:3d:07:ed:11:38:45:05:f4:9e:d2:
         5e:8d:b8:3c:0e:2d:b4:2d:c0:22:ed:23:b9:12:51:3f:c6:aa:
         b0:cc:b5:94:be:3e:d3:c5:1b:89:52:8d:0f:f4:54:52:fc:c7:
         d1:4b:f5:e1:e8:1a:81:b0:ed:74:1b:a7:0b:f3:05:2c:8d:a6:
         ce:e1:10:db:b9:25:84:2f:51:3d:52:f2:0b:ef:14:a6:84:89:
         e8:e8:57:37:82:9a:10:0e:4e:3a:5b:b1:e5:16:b7:05:60:08:
         d0:3b:7b:af:85:e4:ba:7b:f2:3e:43:56:76:8a:5c:4f:0e:d9:
         2f:ad:0f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPahpYjFjVM4gyqQexKXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1
Njc5YzgwHhcNMjUwNDEzMTMwMTMxWhcNMjUwNDE0MTMwMTMxWjAzMTEwLwYDVQQD
Eyg0OGQxYTM4ZThlOTdhYzk4ZWZjNDI3M2RlYmVmNGZkYzNmMGIzMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsqSYYVqGhJKJN6PIkhuMaYW/Cys
jSRxEKTi3k8X5D53JAoHNcyTqVHXlyau2DqSLyZ+76LtEfk6I0Gg0/xlqBH7iWer
wL1aNGhN7vIZ1FHBeoPzsvV0b5LEcaNtNNqzrirLFj+e8jz7uPi/RpCvQ7q3BSXT
90WHtaXBSsTcaAr08Fq0vAoItun/JzOGakiOppdgUCuN/CkaQkCohDCsDr5iZiOr
RWxF8Yw3Pok+xN7Aw7zyqF8IMZNPz5c8SGVQxoIHWe7gmC0Kyg86wYvRia4L951w
s7jnr340IHufP2JLp8XG4Y6UYDiEcIls/y/EXVcA77RPFhBaqQXdM22WJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjRo46Ol6yY78QnPevvT9w/CzJPMB8GA1UdIwQY
MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt
MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi
LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/EiKPkZ
tNNuxO3djthtmvjzPVppVN/P2+mttMAbHIqDhHHwJYkeLw3bFekDe0oY9/IvLg2C
IQU+64xxJAZWZW2KcwG1QWmO8qy6QWoXx5kjwyOkRsHjHFRIILuuUTU0DMomUlct
qO6AoAkU1/21PbCPOSagwi2qAWC0cFRMLrq359uKtPw9B+0ROEUF9J7SXo24PA4t
tC3AIu0juRJRP8aqsMy1lL4+08UbiVKND/RUUvzH0Uv14egagbDtdBunC/MFLI2m
zuEQ27klhC9RPVLyC+8UpoSJ6OhXN4KaEA5OOlux5Ra3BWAI0Dt7r4XkunvyPkNW
dopcTw7ZL60PQA==
-----END CERTIFICATE-----