Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File:                     3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier:          H5pGks9SNl8b06c5zJxYTzG/4piSvd8urO2sF6d+BDY=
Subject key identifier:   B9:87:CB:E7:79:2D:F7:1E:6C:79:BB:60:98:6E:F5:B0:50:BE:F8:D5
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer:       /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial:       01962F3D3D2FD424E6AB143180238D8B3705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number:          109E
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: 1u2xXclCG42c6BsDLfXICTbtfGT12OlbivL0xGG2cK8=)
                          2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3d:2f:d4:24:e6:ab:14:31:80:23:8d:8b:37:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=b987cbe7792df71e6c79bb60986ef5b050bef8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:3f:39:51:42:34:b6:d8:2b:40:de:c8:8e:
                    39:32:fb:d0:31:46:3a:34:9f:ab:f3:ba:b6:c5:80:
                    f6:c8:97:5d:aa:04:83:fb:b5:1f:dd:f0:d6:b6:c1:
                    78:e1:94:96:6f:2e:2e:c0:87:a3:de:a5:d7:19:b7:
                    5b:72:e4:98:d1:58:0b:5a:b8:4d:1d:06:98:29:99:
                    c5:74:07:3a:76:06:f5:01:12:7b:e9:49:41:85:40:
                    24:85:5e:c0:13:67:b7:06:96:02:01:67:68:96:e7:
                    69:6d:c7:9f:5d:27:75:22:ae:e6:f4:72:2f:3d:17:
                    d7:63:93:20:a3:7b:49:35:78:5a:c3:cf:b6:2e:2c:
                    c9:05:77:08:ba:0b:64:c5:d0:8e:8a:f3:b5:52:db:
                    52:b7:5c:af:a4:4d:72:1a:ce:be:98:14:76:78:2b:
                    07:69:59:16:dd:29:2b:50:f9:1a:a3:44:4d:2e:6f:
                    3c:02:1a:73:49:c9:1d:74:19:29:78:5a:30:ab:29:
                    50:1d:53:66:fd:84:6d:17:b4:6d:b6:c4:de:96:c3:
                    a9:b8:d3:4d:b4:cb:90:97:ac:42:18:1a:9e:fe:b4:
                    1c:77:1f:ee:c9:85:c9:17:30:aa:57:bd:b9:24:6d:
                    ae:a5:06:c4:3e:3b:86:f7:e0:01:db:b6:32:fb:4c:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:CB:E7:79:2D:F7:1E:6C:79:BB:60:98:6E:F5:B0:50:BE:F8:D5
            X509v3 Authority Key Identifier:
                keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:f4:e3:a4:36:9e:ea:6d:98:64:f0:fa:8e:b4:92:92:92:
         e6:84:e3:08:88:b3:12:f9:e0:ba:80:43:78:e5:04:68:6a:0d:
         77:0f:45:00:b5:54:01:af:4d:69:92:17:b0:10:0b:1e:ef:85:
         3e:fc:83:85:27:2e:a7:6f:7e:d3:0c:c7:64:ad:54:b9:ff:f9:
         4b:e7:65:37:20:3e:dd:ca:8a:e2:ec:21:e4:10:62:f7:45:a6:
         90:9a:1f:48:86:07:5f:e4:ad:ae:0b:98:3d:b9:97:ae:80:76:
         e5:a5:59:28:ca:9e:ef:8b:41:a3:09:79:1f:fd:af:bf:49:d5:
         57:b4:20:c3:26:31:49:24:e2:a9:8e:46:05:3c:4b:ef:6a:4f:
         2d:7e:5b:b6:3e:ee:65:2a:db:e0:85:e3:b9:ed:79:a5:c7:53:
         dc:17:e2:e6:07:7f:42:83:b0:ec:e7:e7:64:90:7e:46:15:75:
         9d:db:8c:47:5c:72:c7:c8:cc:84:d1:b1:06:cc:54:e8:0d:8c:
         2e:38:d5:f7:dd:09:6b:97:27:d0:72:32:22:32:54:7f:cc:dc:
         1a:41:33:ee:12:43:11:6f:01:91:ff:60:72:21:e2:81:74:5f:
         cb:89:89:25:73:07:e2:de:96:ff:bb:5a:f7:d2:a8:16:67:36:
         38:a6:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----