Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File:                     P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier:          01/xTBwkwivsfUyDBd/zJ2hl2qorkv2G0NC9FvEQgfk=
Subject key identifier:   8A:9B:25:07:6E:57:74:7C:8D:81:4D:72:19:FF:12:A5:7C:02:72:96
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer:       /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial:       01962E9932BC49ABC30ECF4B95315F58ECB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number:          11FF
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: BfNexY5OqoQ7WOolPlzeDpCCs5M.roa (hash: rSm9EPZuoDpFIDuTgtzeM5a6uFOK9MrJk+o4deyRBsw=)
                          2: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: 1fFlXNcJfQxKis/cEINjJS48HhkS/fMAYSOlAViZRIA=)
                          3: uq8LGKG3oEbowZ7v4iuP9ClmWdw.roa (hash: hgRaSL//DCXKQ88iWICAvE3iKVN2MVceZAG3WSssG0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:32:bc:49:ab:c3:0e:cf:4b:95:31:5f:58:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=8a9b25076e57747c8d814d7219ff12a57c027296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:fa:4b:b4:90:ad:4f:99:b7:6c:a7:08:1f:
                    e1:b1:f1:9c:5b:02:fd:07:85:07:2f:9c:d3:54:02:
                    46:cb:50:4c:2b:97:42:d9:8b:ac:cd:b2:65:59:72:
                    98:fa:8f:76:84:17:1e:5b:0b:04:8f:b4:b0:7e:96:
                    f0:f6:8a:77:ea:3b:c8:1a:94:19:11:e3:e3:1b:b8:
                    89:88:d4:4c:6b:66:08:44:23:70:0f:59:d8:65:3c:
                    54:00:66:99:fd:95:a4:c8:8a:e3:3a:55:a3:27:c3:
                    6f:b9:65:6f:90:ae:fa:5b:58:c8:7e:48:75:f2:92:
                    cf:e3:7d:b7:09:e7:c6:4e:1c:d2:4b:4d:c0:d5:cc:
                    aa:45:db:48:21:45:b9:4d:4d:56:49:55:72:b5:3d:
                    9e:6f:32:79:45:62:ae:6a:02:54:3c:92:f2:b2:18:
                    4f:d6:97:d9:85:c2:73:47:cf:31:6e:83:55:a3:a5:
                    e3:9b:1a:f7:f2:f4:59:ee:b5:cc:93:80:2e:62:d0:
                    2a:41:93:0e:13:c7:6b:2f:2f:8e:bd:67:01:52:8a:
                    47:2d:ff:05:7b:9d:5b:8f:d4:65:4b:5e:d3:79:62:
                    32:2c:70:73:1d:f6:d1:ee:52:e2:32:14:b3:ab:1b:
                    70:a2:fa:10:00:b8:d7:a4:a2:11:46:13:a5:60:39:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:25:07:6E:57:74:7C:8D:81:4D:72:19:FF:12:A5:7C:02:72:96
            X509v3 Authority Key Identifier:
                keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:b2:2b:89:14:5c:65:4d:ef:c7:65:c0:fe:a6:83:31:2d:
         f6:d3:39:dc:fa:ae:d6:9b:47:41:6c:45:74:d1:8c:73:50:4a:
         4e:56:9e:68:2d:a9:00:79:71:cd:b3:17:08:18:11:6a:3e:a5:
         2e:5c:57:80:c8:cc:ff:75:4c:54:c6:df:40:40:b0:fb:e5:b0:
         c6:ea:b0:df:48:2a:a2:31:64:3c:96:bb:8d:93:36:41:ad:05:
         54:9c:9f:68:c9:21:03:53:61:d1:00:55:8a:07:d8:9c:8c:66:
         54:8a:65:a9:9b:77:20:66:7f:89:75:cc:e8:b5:93:50:90:d1:
         b6:60:b4:8a:bb:c6:6f:c0:d4:20:3e:e1:76:dd:03:ca:58:3c:
         62:ac:ae:25:c4:ff:dd:66:60:c1:be:32:bf:24:9d:70:a8:7a:
         c8:d6:ab:ff:df:ca:f9:ae:a8:94:5f:6e:50:57:fe:56:92:06:
         52:e8:7a:a7:3b:36:e9:2d:9e:28:bc:54:2b:a9:4b:5b:0b:b5:
         44:5b:2e:9d:de:78:38:17:9a:ab:59:ca:74:80:45:b6:e8:54:
         ec:fa:41:10:a2:1f:53:7d:7f:72:15:a4:26:6c:16:37:50:46:
         68:c3:f4:d2:97:51:d0:3c:00:1a:29:fd:33:e0:5f:29:e7:02:
         a5:a1:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----