Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier:          jEpyziwAPWUvIPhPvqwAUtzoVjxmG4MyBWNop35Pcx8=
Subject key identifier:   B9:98:9A:56:C9:2C:8B:71:70:5A:EB:1D:6D:39:40:F3:E0:11:8F:B5
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer:       /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial:       01962E2B164082DD1060B7D128F16AC35531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
                          2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: jxZRv3amLVBf5w24PGfxgwdCX4cWvTKR0ifDY7F/mm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:16:40:82:dd:10:60:b7:d1:28:f1:6a:c3:55:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=b9989a56c92c8b71705aeb1d6d3940f3e0118fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:63:3c:2d:22:e5:7b:dd:05:57:d7:cf:f3:
                    e4:c5:be:64:38:3d:e1:8a:ec:4a:91:75:d3:a3:bb:
                    49:ad:a3:16:77:30:43:3a:e5:5d:83:84:af:dc:a6:
                    72:e0:c4:26:98:1b:65:86:28:da:dc:a3:61:6a:8e:
                    52:24:91:39:62:b4:64:84:13:8a:17:30:f6:b6:b2:
                    eb:d9:92:aa:51:06:36:b7:3a:14:3e:52:8d:de:84:
                    e2:3e:87:c5:c8:3b:e4:30:9f:d2:14:4d:05:a9:36:
                    41:26:68:fa:a7:2a:2b:f1:fc:96:15:6d:10:6a:f6:
                    ae:8a:7c:7a:45:05:27:bc:76:8f:79:dc:3f:30:43:
                    e4:98:e2:36:58:a1:9c:9f:8a:42:d5:a8:23:f0:63:
                    f5:83:98:66:97:9e:85:92:ba:1f:12:3b:9a:a8:d4:
                    1d:53:8f:f0:50:b9:a5:91:8d:ca:73:1b:d8:39:85:
                    19:ae:6a:3f:e7:68:32:2b:fc:a2:d1:b7:20:65:6e:
                    b0:83:c5:eb:aa:24:37:3d:df:79:47:7d:99:66:d4:
                    23:e6:8d:7b:e2:0b:08:e8:22:b4:0d:05:6e:53:04:
                    02:60:4e:b0:80:66:57:74:19:fb:1b:08:40:06:d8:
                    2a:af:68:65:ce:6a:2f:94:ef:b2:3c:5f:57:1f:39:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:98:9A:56:C9:2C:8B:71:70:5A:EB:1D:6D:39:40:F3:E0:11:8F:B5
            X509v3 Authority Key Identifier:
                keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:8a:64:72:7c:87:5a:26:dd:3c:81:97:c5:71:a6:f7:62:
         f2:f6:97:f7:41:46:86:ff:21:83:60:68:f4:6c:e5:57:65:15:
         8b:6f:78:1d:16:61:36:58:ae:eb:d9:78:d3:51:46:f5:5b:83:
         f3:92:0a:8b:b3:de:36:54:6f:08:77:36:30:a1:8c:3a:52:db:
         8b:29:f0:c3:ce:1e:84:da:ed:7a:b7:56:71:66:bb:76:6c:fd:
         05:d3:7b:5d:c5:43:c3:5d:20:b1:2a:36:54:73:07:04:33:78:
         6a:03:25:ec:fa:54:41:b9:37:bf:18:8a:a4:cb:19:3a:53:5b:
         0a:e4:42:39:db:47:2b:a5:37:43:cd:ab:06:0a:08:c1:bf:6e:
         17:93:08:b6:45:2e:4e:cf:bf:8b:29:49:bb:55:a5:c6:b7:ca:
         99:24:5f:59:88:3c:94:c2:0e:72:90:81:76:9a:66:6d:3a:e2:
         d6:e0:c7:05:c5:d0:29:b5:27:fd:00:5e:ea:2b:d6:76:c6:17:
         99:84:05:bb:e1:5f:c1:8c:00:8c:11:e3:f2:d1:92:1f:8d:de:
         35:9d:f4:ce:e4:47:0d:35:f5:a3:6f:10:a2:33:f1:1d:07:d4:
         ed:ef:60:c3:66:d5:07:59:e2:5f:33:09:e8:eb:70:ab:39:41:
         e1:11:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----