Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File:                     3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier:          GcgNMNMTq3YHMAiAH6yXgNTzNWYAlsqhEL2jb+Umy8o=
Subject key identifier:   8A:E3:CB:95:93:F8:22:11:33:06:BD:19:72:5D:6D:69:15:6C:A6:A2
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer:       /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial:       01962E2B20F0F5AE20707785B0ACFCE99FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: ocOzLQPhaFngh1leikntPtK5zImHa4W+eUyhMOmSRCk=)
                          2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:20:f0:f5:ae:20:70:77:85:b0:ac:fc:e9:9f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=8ae3cb9593f822113306bd19725d6d69156ca6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:be:87:7c:a4:08:1b:de:2a:6f:ad:f2:e6:91:
                    43:b2:89:5f:19:bc:12:4e:07:5f:cd:50:e0:17:e2:
                    9a:1c:69:0e:46:47:9e:58:97:80:92:a6:c0:08:d0:
                    67:ec:aa:05:70:28:e3:45:35:fe:51:c1:5b:a9:3f:
                    f0:b8:3b:a7:76:6b:b4:7b:c4:8e:55:42:91:ab:65:
                    bc:57:db:8b:b5:69:57:f6:78:e2:23:40:9e:2a:17:
                    b7:d3:ef:cf:b7:a5:f0:e6:1d:8a:d3:85:4c:26:6c:
                    56:d7:09:2a:08:92:0c:cf:6a:aa:ed:8c:93:a6:91:
                    a2:62:44:3c:fa:5c:f0:d2:48:7e:43:a8:64:13:d6:
                    14:8f:fb:59:75:df:c7:04:3e:af:73:9d:a1:47:30:
                    17:80:ef:c0:fa:b0:6d:08:ea:8d:6d:6a:3a:47:f0:
                    da:d3:f9:59:8c:e0:75:1b:ea:3d:2c:5d:98:2d:9c:
                    d7:40:dd:ab:9a:f0:48:11:21:08:5f:ec:0a:6f:dc:
                    4b:02:7c:75:89:60:78:c1:b0:f3:23:a1:c8:e3:31:
                    42:f7:5f:76:77:ef:ab:17:6d:42:28:09:31:3d:9c:
                    87:75:96:1b:84:d0:de:96:dd:ba:43:b4:93:18:9f:
                    02:3a:3a:eb:74:8b:75:ef:87:27:cc:6b:69:5f:bd:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E3:CB:95:93:F8:22:11:33:06:BD:19:72:5D:6D:69:15:6C:A6:A2
            X509v3 Authority Key Identifier:
                keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:61:86:b2:bf:26:d8:8f:6c:31:e9:7f:db:e0:dc:10:02:6e:
         a1:c0:9d:85:85:8b:8c:3a:4c:b7:1e:60:75:c2:56:9a:2b:1e:
         f5:37:16:33:a4:f0:77:cf:ef:42:7c:c4:46:8f:3d:97:3d:50:
         82:ba:e9:76:ef:5a:9a:53:84:38:c5:f1:7b:99:46:88:f0:9a:
         56:b4:f7:10:28:ef:fe:35:28:78:07:85:d1:44:da:f8:58:86:
         55:14:42:0e:a3:fa:6e:7e:c8:b5:92:16:1d:65:21:74:5f:3d:
         d0:b5:38:6c:42:4e:07:a3:11:4d:f0:c3:17:a0:9a:80:65:35:
         0d:7f:97:d2:09:34:01:31:db:f7:59:88:68:19:43:3c:23:88:
         44:14:38:e6:ef:5f:bf:b5:0b:a3:3f:bb:e0:5e:19:9b:86:1e:
         45:8e:65:13:07:19:80:56:6d:9a:8b:12:da:ef:2a:c1:67:f6:
         ec:98:00:c2:43:ed:3c:10:07:0c:9d:3a:ed:2d:35:6a:59:35:
         8c:8e:da:1b:d4:89:f3:2e:a9:83:c8:05:59:40:03:27:f8:26:
         47:ce:46:c3:d0:d0:6a:49:be:2f:eb:74:8d:96:e5:38:ab:ed:
         d3:df:f7:28:66:3b:39:b7:41:dd:79:a9:76:ac:7b:49:2b:f6:
         c9:51:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----