Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File:                     3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier:          yvjb87SFj5oeOqhB67DEAkuW769MApgyiEOGlRRqIF8=
Subject key identifier:   85:A6:1B:D5:97:BA:D3:F6:2F:FC:0D:DB:A1:AA:44:E0:72:75:B8:1D
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer:       /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial:       01962DF3F670F7EBBE283ED2A6887D3285C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number:          20
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: 9J6FP5wmxK694tDSdm3HiPFzYRAOYfWytchoFhOgBsk=)
                          2: 86RH0sDRLgQyh72ODjCn4yKHaZQ.roa (hash: /zKpHEbNzUGhISSz7T6og5zeJtAV07c6h+cicejhfYk=)
                          3: rClNA5S0Q3fTjOMbaJwSykyfOp0.roa (hash: FXdY+wyYX+sNpI3Br0trB4QTzeKr7VAjRPB7tjZCrPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f6:70:f7:eb:be:28:3e:d2:a6:88:7d:32:85:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=85a61bd597bad3f62ffc0ddba1aa44e07275b81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:43:0c:c6:69:28:d5:7a:33:59:ec:b0:40:
                    a8:ba:b5:56:69:be:b0:d0:c8:ce:24:31:a9:32:ba:
                    1e:40:73:fe:00:3d:70:6b:3c:fb:df:9c:7d:8d:cf:
                    54:ed:22:04:e2:47:37:cc:fe:5a:fd:f8:58:74:41:
                    01:ad:f3:1b:96:a0:73:e0:2b:48:22:22:58:49:b8:
                    d4:5e:41:fb:23:dd:78:01:07:b9:e4:24:f7:8f:86:
                    3e:c7:d9:a7:c8:fb:15:04:95:11:bb:cb:9a:77:38:
                    c1:34:ef:65:3b:75:3b:72:72:19:12:42:73:69:ce:
                    78:5f:84:87:21:43:a9:c7:54:6f:cb:14:74:b9:97:
                    18:00:16:7e:b0:24:5a:b0:2e:83:20:85:5b:95:4c:
                    17:ed:16:b0:e1:4c:86:e5:8a:95:7f:7a:c4:14:c5:
                    21:b8:2f:80:88:95:dc:34:74:1d:78:05:64:12:5a:
                    84:7b:50:5d:7c:03:0f:77:67:4e:c1:3d:fb:6a:69:
                    5a:eb:9e:d2:f3:95:ad:f3:1e:32:b2:bf:4b:04:b5:
                    bf:fd:54:10:5f:3c:24:e8:71:1a:85:f2:f6:8d:55:
                    61:d5:34:48:93:48:15:53:81:17:10:16:9e:a9:ac:
                    29:29:c2:33:06:ca:fb:4a:e2:2b:45:31:86:a4:73:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:1B:D5:97:BA:D3:F6:2F:FC:0D:DB:A1:AA:44:E0:72:75:B8:1D
            X509v3 Authority Key Identifier:
                keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:d6:c9:6d:aa:c9:45:78:80:ff:c1:1b:77:6f:cd:68:77:
         9d:e9:c0:76:3e:a2:1f:fd:ec:f3:72:37:ee:f3:22:e0:ba:da:
         bd:31:fe:44:50:1a:c9:41:90:23:4e:52:a4:b9:df:7e:af:5f:
         b4:1d:f2:9e:31:89:a6:99:18:fd:73:71:96:ae:03:c0:bb:f3:
         94:30:f4:31:21:6f:16:88:86:6e:45:cd:ac:fd:6f:d8:e5:91:
         51:4e:9d:f5:a2:b8:de:cf:73:0a:ce:87:ae:f6:71:6f:bc:b3:
         5d:11:02:11:e4:a5:86:3e:47:c2:7f:01:31:7b:db:bf:b5:78:
         6d:e9:0b:92:b9:b6:40:e1:5c:d0:8b:77:3a:65:07:e7:16:3d:
         e5:6e:37:47:28:f8:df:d1:60:bf:47:a8:ae:ab:7c:65:5e:b0:
         1a:69:7f:c5:e5:01:ca:1c:f8:c7:eb:33:9c:c8:cf:64:ee:25:
         7c:5c:46:22:4a:d7:4e:f2:e6:d5:03:b0:67:e1:08:41:69:95:
         d5:dc:c8:12:e4:bb:9e:67:5c:1c:25:25:83:6c:44:b6:a5:59:
         3f:b7:c0:e4:86:e2:61:64:4f:93:9d:31:e7:79:fb:37:5b:5c:
         21:e5:55:a5:56:06:f0:e7:68:68:fe:a7:14:8d:16:33:f1:ab:
         39:ac:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----