Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File:                     Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier:          O76Hdv6HJ1wov8Sb9Xc30+LvtMa4whyhm9LSRKsuo40=
Subject key identifier:   30:87:E5:51:AC:28:0A:93:E3:0B:F5:2A:2D:9C:8A:E3:BA:2A:72:7E
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer:       /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial:       01962DF3D9FE51D604056AFD48CA38A80238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number:          0C78
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: aNA7dgFx8dNXbf77v1jmwElCVww6n/jhMhuzkQFxp8s=)
                          2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
                          3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d9:fe:51:d6:04:05:6a:fd:48:ca:38:a8:02:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=3087e551ac280a93e30bf52a2d9c8ae3ba2a727e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:e2:67:66:2d:22:a2:f7:b5:22:41:20:2d:
                    e0:e4:8d:79:33:ab:59:a9:5f:a1:7d:3f:14:fe:f2:
                    e8:b2:c0:cb:2e:54:14:4f:e5:e2:1c:cc:d4:4f:9e:
                    18:e5:2d:e8:3c:9b:ad:28:0d:78:2b:03:78:b0:99:
                    09:0d:3c:f1:cb:a7:bf:9e:56:f6:2b:53:79:32:6f:
                    79:5e:79:88:7e:b5:1e:07:4c:95:89:49:44:c8:0f:
                    07:f6:8d:a8:5b:10:a5:8f:f1:f9:a4:56:d4:66:d2:
                    97:c3:2f:98:89:5c:07:ae:45:00:cb:e9:77:7f:02:
                    2f:e4:12:55:46:8f:f0:60:63:fa:b2:ac:71:b5:ed:
                    9a:75:ac:a6:e0:a9:d1:00:42:e9:a5:5d:39:9b:81:
                    d3:45:f4:aa:df:92:72:5a:02:69:21:9e:68:3c:12:
                    34:a8:89:c8:d9:5f:ae:6c:17:ed:18:4b:05:f0:20:
                    6b:fc:67:e0:90:e5:65:e4:fc:08:7e:81:ea:f8:8e:
                    e8:b2:e2:ae:1a:52:4e:ff:69:42:c7:ce:95:b6:f3:
                    43:c3:80:39:63:c1:09:e0:25:54:ff:24:65:57:4d:
                    e5:10:65:5b:63:0d:d5:a4:1a:e3:55:60:66:aa:f8:
                    1f:2e:2b:e3:f8:4b:99:25:07:40:5f:f3:09:f9:7b:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:87:E5:51:AC:28:0A:93:E3:0B:F5:2A:2D:9C:8A:E3:BA:2A:72:7E
            X509v3 Authority Key Identifier:
                keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:23:4f:be:82:6b:77:64:47:9e:c1:f6:25:5a:71:55:7d:
         30:43:8d:0c:e4:4f:a5:ac:4d:99:4b:ee:3e:74:59:e7:90:6a:
         03:ea:af:bb:0b:d6:f3:9e:94:76:fd:41:0e:8d:87:c8:35:b8:
         10:2a:c5:25:35:94:60:ca:27:22:a6:ee:b7:bb:d0:9d:e4:c8:
         84:76:51:82:2c:98:34:a9:95:02:c3:df:8b:66:4c:2a:11:96:
         b7:af:92:04:bf:0e:eb:0b:4e:01:84:63:ee:61:7a:e7:20:48:
         43:b3:a4:8e:28:ba:ca:3f:07:b2:38:35:9d:03:41:9b:5e:f7:
         52:7f:ba:18:16:4e:52:7a:e7:4b:6f:10:1b:ba:92:98:fa:92:
         27:10:f2:e2:ba:6c:ad:0e:8c:a5:08:f9:54:bc:69:22:ba:10:
         ba:c0:dc:c2:a5:61:55:d5:c7:03:50:61:63:e6:4a:b5:10:33:
         7b:72:42:3e:8c:71:3a:fe:c5:5b:84:50:6a:92:da:99:9a:1a:
         fa:f8:f1:9a:29:08:13:cf:a1:6b:9d:16:7d:be:4a:b5:4e:8f:
         58:66:9f:fc:26:b9:86:15:3e:b5:fd:a9:f5:d7:ca:21:c0:12:
         6c:9d:f4:46:c1:8a:d5:d8:92:c8:ae:c9:0a:d2:0f:98:74:f4:
         48:c0:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----