Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
File:                     PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft (raw, json)
Hash identifier:          RLb8Wm1VCEvMnuxYFrzRBUQMiayhLoMPasVZuE/XMhw=
Subject key identifier:   AB:E9:DA:5B:C3:5D:D1:40:E0:97:1B:CE:79:EE:42:A2:C5:AE:89:B0
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Certificate issuer:       /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial:       01962FABA42E4969B622DFF6BA7EAA45101A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
Manifest number:          03D6
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl (hash: mtYNU/ARQVOFvb/wtr6jGMZzsUR0oMh+l/cIdby0fDQ=)
                          2: eSMweySQayVjw4TxrRct4yupfzc.roa (hash: vIdUHA4BTNYVBukw2W8J/Pb08xt6VrAwfBVQVhqYWeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a4:2e:49:69:b6:22:df:f6:ba:7e:aa:45:10:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=abe9da5bc35dd140e0971bce79ee42a2c5ae89b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:11:a2:d8:d1:b3:77:71:af:2c:d6:19:cd:
                    f1:34:14:4b:42:f6:21:28:bb:18:9b:c1:8b:3e:04:
                    d5:f0:72:56:cc:5c:88:df:50:e1:2a:96:73:f1:26:
                    d3:f5:10:ea:1e:d8:92:75:f5:22:80:86:ee:23:56:
                    87:02:24:f5:b9:77:7d:cd:d7:d5:d8:2e:d7:21:fd:
                    b1:80:0d:8f:ac:5a:07:d1:59:ba:61:9d:54:8b:5b:
                    f0:82:87:56:a6:0f:58:68:91:97:0c:71:73:b2:c7:
                    e0:7c:3f:6f:14:75:2c:72:19:20:03:3e:1e:15:4e:
                    69:00:ad:ba:6e:2e:dc:26:45:cf:08:40:53:05:71:
                    52:96:08:40:45:74:d2:0d:ed:b6:ab:0f:5d:f9:cf:
                    9e:02:a6:5b:ad:52:8c:5b:3a:5a:98:48:68:22:9d:
                    a1:53:32:62:54:20:e6:35:e4:47:8f:9e:18:ba:af:
                    bc:3b:07:18:ac:b5:66:c2:ad:86:93:93:64:b5:de:
                    a4:3e:81:55:f4:03:c6:20:e3:17:38:38:e0:a2:47:
                    bb:65:25:e7:0d:5b:2a:03:f9:66:b5:da:97:d8:cf:
                    64:65:c6:fb:f5:a3:8d:13:b4:fc:e5:9a:f4:b8:b2:
                    23:07:f6:a6:3e:e8:73:38:5b:8b:ee:20:4b:a8:44:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E9:DA:5B:C3:5D:D1:40:E0:97:1B:CE:79:EE:42:A2:C5:AE:89:B0
            X509v3 Authority Key Identifier:
                keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:8d:51:2f:4a:49:4b:8f:79:41:7c:ee:1d:1e:d6:94:bc:
         3c:fb:eb:bb:bb:8b:de:7e:ac:d0:c3:f7:83:34:d8:12:6f:6f:
         02:33:55:1c:a8:7f:74:20:ec:07:37:2c:5a:a6:0a:3e:d7:aa:
         75:ab:cb:2f:fa:ae:20:b0:20:5d:0e:44:8f:e7:33:09:3c:38:
         00:71:19:65:7c:a7:cd:ce:41:38:10:95:bc:cd:43:67:80:bc:
         f3:ac:50:17:30:95:e7:50:ef:60:95:ff:07:a6:b0:2d:7d:8e:
         01:52:f1:57:d2:6a:09:fa:45:ca:2c:a0:50:40:4e:75:e8:8e:
         26:0c:4d:5d:35:00:6d:aa:e2:b6:b3:6c:80:ca:24:7c:db:be:
         95:23:80:be:68:c2:fe:8c:cc:03:cb:88:92:a8:d3:c0:60:46:
         7b:96:6f:05:e0:dc:22:d2:a7:55:5a:27:8c:dc:68:45:78:a3:
         50:5d:53:88:d8:34:33:18:72:4c:17:6c:77:70:9a:70:5d:6c:
         26:b7:a6:a3:3e:e3:d5:f9:2d:1d:1d:19:9d:66:7a:fc:e9:0c:
         5c:98:36:08:6e:b0:76:c0:98:46:16:9b:3b:4f:84:1b:2d:c8:
         0e:09:17:12:33:da:4a:08:ba:c3:d1:a7:0c:3e:83:25:e5:00:
         14:25:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----