Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File:                     3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier:          AuyLENazRfFxYR9S8oj9bLzzFKKC6kiiIlbfToJ+ByI=
Subject key identifier:   E6:E4:36:50:D9:66:FB:62:00:F4:92:AB:83:C3:C0:CB:46:3C:50:B3
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer:       /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial:       01962F3D88766DD88B8C1BB990A941378D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number:          1496
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: NSkCIXH7WhbYqD1P4704cS3Mra4grznWgCUDbx4ZOBE=)
                          2: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:76:6d:d8:8b:8c:1b:b9:90:a9:41:37:8d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=e6e43650d966fb6200f492ab83c3c0cb463c50b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:ee:cf:8f:ae:17:02:29:ca:a8:88:f0:f2:
                    2e:7b:e7:c9:a6:7f:23:70:2b:29:66:28:07:29:ae:
                    6b:82:db:7c:85:98:ba:31:68:a6:b0:d9:04:65:26:
                    dc:16:3a:e3:90:13:2a:8d:e5:cd:fe:32:18:72:a4:
                    78:56:4c:f2:f0:74:19:86:8d:ad:35:05:82:01:fc:
                    77:85:a8:0c:c8:ad:f9:e8:79:cc:23:df:e1:d6:a9:
                    1f:6d:cf:d2:9e:7b:db:72:08:24:45:82:e1:f3:47:
                    e9:58:1a:41:ad:f3:36:34:ef:68:11:53:13:ef:82:
                    73:86:5b:79:19:28:ea:b7:fa:10:52:2a:a9:7b:10:
                    40:06:42:09:b6:61:41:c8:1b:db:eb:0b:5e:97:91:
                    f5:c6:f7:10:e9:64:ec:d5:95:b9:7d:69:99:e7:41:
                    a0:9d:46:7b:12:fd:c7:f2:9b:a4:c2:2f:f3:3a:a5:
                    68:e2:c0:36:39:68:44:4a:5e:84:3e:d3:6a:40:b9:
                    94:c1:04:cf:b2:17:de:1f:d8:05:98:b0:cd:51:a2:
                    47:f1:51:39:64:86:8b:03:eb:c4:4a:c1:f5:f2:cc:
                    95:98:8e:11:1b:01:ac:73:62:65:da:6e:bf:23:6c:
                    47:19:3e:c5:c7:f8:49:70:12:f1:a5:73:d3:9e:91:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:36:50:D9:66:FB:62:00:F4:92:AB:83:C3:C0:CB:46:3C:50:B3
            X509v3 Authority Key Identifier:
                keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6b:73:f9:74:6f:8b:a8:5f:76:46:c7:d1:81:48:44:62:12:
         10:e1:9f:26:ab:36:4c:88:43:36:d4:db:54:27:0a:3d:34:35:
         e2:87:27:7d:a3:f5:84:b3:34:95:1f:c8:df:76:0e:df:9d:bb:
         01:de:49:91:a0:d9:4e:06:d3:e4:de:1b:dd:7e:20:29:05:cf:
         72:cc:53:51:9c:6b:f3:33:98:f6:64:a7:b0:1f:0b:e0:1b:6f:
         a7:93:8d:59:c0:dc:87:1f:20:f1:45:33:c9:bd:3e:73:05:16:
         18:38:60:7b:f0:29:33:d4:b1:fe:b0:56:bf:3f:79:61:53:a4:
         70:48:65:cb:57:e9:21:ff:2b:b5:59:05:47:9a:cc:3f:5e:57:
         f3:64:5f:64:4c:c2:49:f8:10:5d:c0:08:29:d4:e3:45:3e:87:
         d8:4e:87:35:00:32:be:96:01:16:7b:ad:67:98:0f:1c:8f:5d:
         d3:b0:4d:86:d4:8c:13:81:7c:46:fa:ad:97:1d:f9:f4:13:13:
         54:36:79:6a:4e:d0:9f:fa:3e:eb:31:41:0a:c4:d0:2a:78:2a:
         c6:08:68:15:20:d5:38:00:c5:3d:ba:60:35:58:ae:44:1a:e8:
         dd:b5:99:19:bf:14:56:97:0c:c5:84:4f:d7:97:33:6e:b1:f3:
         08:bb:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----