Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          2drHPK5K3btCb5GWyNuyZVgKymlvoN+FLgzjAgGZ0Qk=
Subject key identifier:   1C:B1:55:91:E5:19:D8:BD:27:02:0B:E6:65:EF:22:0E:4E:E5:99:89
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       01962F06BF7F65A2FF3D7F560048665F615D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          06A0
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: RacQO2womldpecdamNcnQVb8O9uqAGH5+QJZyAUsmy8=)
                          2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bf:7f:65:a2:ff:3d:7f:56:00:48:66:5f:61:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=1cb15591e519d8bd27020be665ef220e4ee59989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:cd:3c:d4:2b:44:4d:3a:74:22:1d:fa:43:
                    5e:bd:6b:ab:92:f9:8d:39:0f:4c:f8:ed:7e:a0:9d:
                    06:03:ac:45:74:3c:aa:4f:81:6a:12:3d:6b:82:23:
                    09:d8:07:44:3f:f7:ee:c4:b1:5c:cb:77:fc:b9:92:
                    92:e3:1e:d5:16:4b:d5:62:49:9f:f9:4b:fe:fc:c9:
                    71:55:6b:df:d2:de:a5:b9:c5:cd:fd:ea:43:25:c4:
                    7d:ca:f1:7d:b6:4e:3e:51:77:1f:3a:2d:bb:0e:91:
                    78:db:cb:34:7d:42:6f:1b:60:a3:a0:31:5d:d1:0d:
                    b0:91:2f:ac:0d:9e:fd:a2:10:ba:65:b2:e1:15:27:
                    11:3d:a7:89:3a:cb:43:6a:d5:47:79:0d:92:df:b0:
                    d7:be:17:b1:df:64:9a:6d:fc:14:f7:16:78:f2:53:
                    1d:13:7a:16:44:cf:54:2c:86:ef:34:07:be:17:61:
                    f9:69:b6:58:67:3e:9b:65:3e:a6:51:b6:df:3b:ab:
                    f5:2f:61:d2:18:49:a3:f7:2d:0f:a6:0f:18:55:c8:
                    b4:69:35:84:16:2c:16:57:76:88:55:55:c0:d4:58:
                    fa:d7:a9:c2:80:6a:3f:3b:96:a1:54:0d:dd:af:bc:
                    af:7f:04:9c:85:53:6a:c6:9b:03:e4:11:a2:a6:d8:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:55:91:E5:19:D8:BD:27:02:0B:E6:65:EF:22:0E:4E:E5:99:89
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:60:27:cf:95:13:19:83:75:7c:7a:c9:d3:50:6b:be:8b:
         2d:50:48:4c:13:bc:8b:0a:6e:fe:35:09:5b:b0:c7:88:b7:1a:
         c8:6c:80:03:37:a2:02:95:d6:4c:d3:94:1a:41:6d:b5:cc:61:
         12:cd:cd:60:e7:a9:45:84:d5:35:38:8f:eb:9a:a8:1a:c6:4f:
         a6:44:5f:15:96:96:e7:03:8c:b6:49:21:9a:3c:fb:1b:37:66:
         08:6e:86:b3:e0:9c:59:9d:39:c7:63:b3:01:4a:50:6b:15:6e:
         57:7c:05:2d:31:53:ce:f3:46:f2:32:2d:ec:2e:a9:40:ea:7f:
         80:45:80:80:48:7d:56:2d:5c:76:6b:0c:37:37:08:a0:bb:ba:
         4f:0c:a4:7c:09:e1:68:5b:c3:27:ba:34:cc:d5:3b:ea:6c:a0:
         31:93:56:17:f4:e9:ee:d6:1f:45:ea:e7:10:f5:6e:03:15:3a:
         37:d7:ce:49:54:9d:1b:11:50:1b:36:c4:98:f0:35:3f:a9:e1:
         fb:09:e3:11:ce:f1:9c:a0:a3:ae:c1:67:9e:f9:6a:17:1a:8e:
         af:1f:6f:13:39:9c:2a:df:d9:da:bc:95:cc:e1:1a:82:ce:d0:
         97:cf:52:b6:63:f9:e3:2d:68:0e:5b:69:c7:b3:fa:39:0d:f5:
         c9:c1:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----