Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File:                     3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier:          RXVwmBKQj5QgJ/H+idKwNyPI0tZpJhGKkqPUYR8qybM=
Subject key identifier:   6B:38:18:F4:B7:96:95:EF:64:86:4E:C1:35:96:5E:2E:B4:FD:5B:61
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer:       /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial:       01962E61E511D4E2EC250F585D28D8C89E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number:          0212
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: OcOIsyXbT4d/Rry+AIhkKxm9sZ6y5QWdpSRe/9lXDt8=)
                          2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:11:d4:e2:ec:25:0f:58:5d:28:d8:c8:9e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=6b3818f4b79695ef64864ec135965e2eb4fd5b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:43:eb:e6:03:58:ed:47:5a:59:34:37:92:
                    55:57:3b:2d:bf:cf:c0:09:aa:67:72:ad:b9:3a:c6:
                    23:dd:fb:f3:eb:30:df:16:fc:4e:e8:af:0f:c4:81:
                    7e:af:26:42:56:d6:11:41:fe:b9:21:26:5e:2c:2c:
                    9e:95:6d:6d:81:eb:12:a9:a5:b4:fc:8e:60:c6:43:
                    3d:0b:87:2e:d0:2a:5b:f8:bb:f4:3a:78:b0:66:96:
                    ac:96:83:e5:d2:1d:dc:00:23:57:2b:5c:8d:1c:4a:
                    57:28:4b:54:4c:1a:a1:39:25:d0:e9:c0:e1:cb:8e:
                    d9:ea:ed:c8:ff:c9:56:ae:47:ae:90:4c:23:a2:b3:
                    03:d3:f3:ad:1c:fb:4a:9e:09:d1:a8:3a:4a:d7:44:
                    51:9b:64:a2:c4:f5:fa:f9:57:67:18:36:17:b5:90:
                    4e:61:c5:64:0e:77:7a:f4:7e:5f:e0:6f:a3:48:fd:
                    f2:b2:21:ad:e8:c7:7f:17:96:5b:46:5c:00:75:07:
                    59:9b:0a:30:da:0d:0c:e7:be:4a:03:7f:04:b0:62:
                    d6:76:df:67:33:f6:0e:41:18:c7:89:f8:63:76:84:
                    31:83:ca:94:d0:71:43:a6:0b:90:d7:1c:3d:45:58:
                    4b:f0:d8:ed:2d:25:df:b3:12:bd:08:bf:3e:d1:eb:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:38:18:F4:B7:96:95:EF:64:86:4E:C1:35:96:5E:2E:B4:FD:5B:61
            X509v3 Authority Key Identifier:
                keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:95:de:81:cf:fa:b9:cd:99:34:a0:bd:ab:a1:5d:08:e7:
         bb:10:c3:53:06:b0:3e:72:a1:2b:f7:ec:a4:82:32:9f:fa:89:
         0a:62:97:92:aa:23:b9:c2:cb:28:85:d3:ce:75:79:69:95:78:
         cb:a6:db:ff:f8:de:d2:cd:4d:43:f6:c7:0c:8f:42:9d:ec:da:
         a9:4b:68:a7:9d:53:dc:1b:f4:af:eb:11:0f:81:e9:04:a3:00:
         26:82:ca:0d:8e:a9:04:5e:a3:2f:8e:88:59:be:8a:41:37:6b:
         ba:ef:cc:80:ca:7d:c5:8c:41:16:9e:b6:ce:4e:fb:6f:2c:86:
         3c:8f:11:d2:7e:cf:a3:f0:85:c2:ac:a7:96:7f:3a:f7:b3:2f:
         a1:fe:b6:3c:8a:1a:7b:55:ee:df:79:f1:b4:69:b1:6e:d2:dd:
         e8:48:9e:10:58:0d:05:e6:38:13:ff:a8:75:5a:fd:8d:dd:29:
         bd:b2:85:07:4f:ce:40:30:0c:92:53:d7:b9:f9:e9:36:77:64:
         3e:d1:d6:79:34:e4:d1:68:d3:83:0a:64:4d:2e:b6:a8:8f:89:
         81:59:89:9d:94:34:88:2d:07:fa:08:4a:09:e6:17:11:e2:e0:
         a2:aa:f7:a9:7e:1d:36:79:e6:36:f8:63:83:08:6e:35:7a:06:
         01:60:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----