Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File:                     PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier:          W7V8GLRTOc0t1QdlQUGk8Z9cb91/Pn1OafhoCmb9ncI=
Subject key identifier:   37:8B:AA:4C:E7:96:3E:CF:97:A1:0D:36:71:5D:B1:2E:76:2C:C0:58
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer:       /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial:       01962E2B00ACFE518A6571AE9B0446ED5F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: stO8RsShjNb90dMU9i0bU3mXFzIXHikYyrdfndFXPks=)
                          2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:ac:fe:51:8a:65:71:ae:9b:04:46:ed:5f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=378baa4ce7963ecf97a10d36715db12e762cc058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:84:fe:ca:77:d4:79:a2:39:32:a6:4c:f8:
                    cd:85:ba:18:e6:cf:a0:63:a4:cf:63:0b:a3:e0:a0:
                    81:1c:09:ad:32:30:3c:d6:94:2a:b4:24:fe:63:39:
                    7a:6d:c9:c7:b1:0d:35:0e:3d:dd:a0:07:0f:99:3b:
                    8b:08:e2:df:00:4b:3c:c5:53:2e:31:15:8c:0f:a1:
                    49:b1:b8:b0:43:a1:8e:96:a0:8c:68:ff:ef:2d:92:
                    a9:50:75:05:e5:1e:be:29:56:ef:d9:9d:aa:6b:1e:
                    ee:d1:99:c6:08:b3:a9:80:4b:70:dc:35:06:85:48:
                    a2:da:1b:bd:1e:d7:59:70:81:23:e3:a2:d1:8a:c6:
                    f8:d6:52:79:9b:20:41:d4:59:16:12:33:52:3b:07:
                    81:c7:e0:5c:3b:a8:a5:f2:bd:7e:1c:b2:cc:1d:0c:
                    49:0a:f0:89:4c:03:95:40:7e:c4:f0:f9:c8:ac:bd:
                    be:cf:b3:1a:6f:a9:0e:73:c3:91:54:04:65:ac:a9:
                    ef:24:10:25:af:d9:9b:cf:d7:2c:1d:d9:b0:b3:cc:
                    d4:68:7e:5d:b5:87:93:ed:37:c7:64:03:4e:c1:dc:
                    85:dd:ba:f6:47:43:ec:6d:a0:5d:7a:f2:bd:bd:08:
                    01:6e:ad:b2:a4:0b:47:ec:7c:1e:73:ad:ce:05:22:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8B:AA:4C:E7:96:3E:CF:97:A1:0D:36:71:5D:B1:2E:76:2C:C0:58
            X509v3 Authority Key Identifier:
                keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:79:e4:c7:38:66:bc:c6:a3:7d:7c:19:38:17:33:70:d0:
         15:f1:41:23:06:a2:b3:07:e6:91:fe:48:46:ca:6b:75:27:19:
         5f:5a:b4:d9:e0:00:81:68:a3:79:61:83:2f:14:e6:39:0c:9d:
         b0:63:3c:88:c4:a9:6e:7b:38:63:e8:08:64:78:37:bf:76:26:
         08:00:46:a4:69:2a:b4:5c:8c:a6:3c:d8:19:d5:eb:d4:14:a8:
         40:65:91:2d:e0:fa:b0:c2:b2:f0:35:18:f0:50:58:1b:87:0f:
         dd:e8:b4:27:3d:d1:83:b7:13:53:22:43:a0:77:c0:ca:fc:f4:
         61:6c:8d:cd:a8:23:f4:0c:a8:4d:a4:95:e3:3b:2c:ca:01:9e:
         80:0d:d9:0f:c1:05:d0:39:db:4b:e5:f4:32:4c:08:81:aa:4f:
         2d:e9:f7:28:77:65:6c:cf:92:1e:37:a1:55:4f:5c:57:e3:30:
         54:bc:0d:09:da:73:b7:ce:83:fb:78:46:96:d9:1f:77:8d:4b:
         26:d8:28:76:e6:88:bf:86:56:90:9b:3a:14:96:f7:27:d6:46:
         1f:9a:2f:f4:2d:59:88:7d:aa:18:83:0d:87:b5:d0:8f:75:43:
         e6:fe:21:88:4e:a1:62:41:62:4f:1f:ea:5b:a1:45:d3:88:61:
         97:02:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----