Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File:                     3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier:          ElMJ8YzCLA6NNqsV+HqLff4D0IPpWDM8/+oX10wzx+8=
Subject key identifier:   F1:68:C6:CD:CF:98:E8:DB:64:4E:09:AE:F7:27:0F:FF:B2:97:3E:B7
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       01962F74940635AD68E4E83BB1A913261E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: sVLzZ3hrhENsKbYxlo4Jjfm4J6ilBeYxLUbM7GskVIg=)
                          2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=)
                          3: 7NaNhfKzkHk-4U6P-rr5I2f5Dns.roa (hash: ho2GvZ21Aa+NkGp3FzrcTvxIRbuhiRhcV51nfQsaRvI=)
                          4: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=)
                          5: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:06:35:ad:68:e4:e8:3b:b1:a9:13:26:1e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=f168c6cdcf98e8db644e09aef7270fffb2973eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:a4:25:ab:72:66:b7:5a:f8:e2:5b:d8:fd:
                    7a:de:b1:30:a3:c1:45:db:b7:6a:0c:ab:3f:8f:cf:
                    af:e0:b0:c4:c4:fa:da:cd:ec:63:5f:08:dd:17:6a:
                    30:8e:6a:f8:3c:0c:6a:1c:e6:bc:17:b8:df:12:91:
                    1a:95:2b:ca:c9:2e:a1:6b:c4:7a:9c:a7:4a:8a:80:
                    dd:95:be:6c:74:0e:01:a2:66:79:ad:2e:d0:b0:8f:
                    6d:ba:77:9c:cb:43:49:e7:96:ce:db:f2:44:29:92:
                    c2:a3:4b:9f:8e:00:63:c7:ad:ba:ef:ed:30:24:4a:
                    ca:29:cb:2e:fe:f9:b2:24:97:a3:ec:4a:e1:f8:4f:
                    e4:96:aa:3c:07:78:ac:40:f0:88:de:46:52:59:24:
                    7c:c5:6d:5d:3b:c8:80:07:50:0f:d4:6c:93:e6:ae:
                    6d:b6:ef:1c:ad:96:04:1e:db:3b:53:d3:71:31:5a:
                    ac:cd:83:1c:0f:e9:2c:63:77:c8:a0:e8:7c:23:ee:
                    2f:95:20:53:71:50:26:04:3b:43:51:ba:d5:a0:d2:
                    ff:e3:93:79:b4:9e:1e:fc:1f:db:dd:ca:1f:cd:0c:
                    87:79:03:25:05:e1:20:e3:9b:c9:4f:d7:63:fa:54:
                    18:e1:e9:51:2d:e0:c0:85:53:de:79:0b:25:0d:80:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:68:C6:CD:CF:98:E8:DB:64:4E:09:AE:F7:27:0F:FF:B2:97:3E:B7
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:36:60:b4:25:f8:7f:87:14:8a:52:78:3e:52:c9:ef:09:
         7b:ec:8b:83:95:e0:f2:f4:33:16:f0:b5:17:8c:b2:78:2a:e7:
         8a:ae:ed:a9:ae:28:2f:bd:2a:5f:b8:1d:49:d3:97:40:3f:0e:
         e0:a2:6d:a3:4b:d2:89:13:7f:de:fa:19:f3:09:ad:f8:33:e3:
         55:df:c3:84:a2:db:94:91:52:53:d8:54:13:d8:d6:9c:a3:71:
         34:3f:48:7f:8d:3d:f4:52:76:9f:14:0d:1e:bd:23:45:18:66:
         f2:3f:77:f1:f1:39:14:d4:10:70:8f:b3:02:85:a8:89:6f:a7:
         fe:d8:22:cb:08:f7:e7:ad:f0:07:60:66:ec:36:f9:09:98:62:
         a3:09:00:bd:1b:8e:14:b7:ec:8f:04:8f:2e:95:ce:8b:80:19:
         28:62:5b:d2:72:6c:d2:3e:10:dd:fa:3d:4c:38:97:98:db:77:
         49:10:a7:06:18:04:84:b2:fc:e1:d2:b8:54:6a:42:81:94:5d:
         23:3d:42:8d:8f:86:98:6b:8a:c6:6d:24:46:4f:5a:d8:0e:e3:
         92:86:70:1f:f4:08:32:69:04:5e:a4:f7:7d:c0:68:af:aa:c2:
         b9:ec:b4:62:bf:a3:fe:97:ff:bc:25:30:30:4d:52:4c:dd:7d:
         90:14:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----