Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File:                     3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier:          sBNvOPRLoBiWxh+Zz2b+yz5ZjnkHziKT93G+0ARnyPY=
Subject key identifier:   B9:15:8A:61:30:38:05:E8:C5:11:2C:11:19:55:4D:BD:7B:DA:55:5D
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer:       /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial:       01962FAB5F88EDB1DABC657EB762418E6C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number:          0B46
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: mFaYVd/3hFEZ/n7oPFQm5RWdqchQdi9a1fJw44WDyDk=)
                          2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5f:88:ed:b1:da:bc:65:7e:b7:62:41:8e:6c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=b9158a61303805e8c5112c1119554dbd7bda555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:ce:d8:18:8f:75:25:2f:12:f3:90:a5:5f:
                    4d:21:ab:0f:35:53:ca:b3:c9:34:95:50:e6:03:5f:
                    b2:cb:7e:65:ee:cf:de:e5:22:ad:f0:64:55:90:a5:
                    90:44:c9:60:20:c1:1b:e5:87:5d:fd:09:d0:bb:ca:
                    78:a9:5b:86:02:09:bc:a4:b5:6d:eb:38:03:75:1e:
                    fe:5f:5f:6a:8b:1d:dd:a9:9e:13:ea:9a:92:86:f9:
                    bd:7f:96:b1:1a:e4:6b:1b:46:14:7d:b2:b6:d2:75:
                    d4:25:08:7b:48:8a:b3:18:a0:72:d4:62:eb:39:73:
                    66:07:25:f3:75:49:af:e9:3f:f2:80:d9:1a:a0:01:
                    0f:21:85:48:bc:8a:d8:d8:b4:6b:ce:10:df:ec:87:
                    4a:66:79:b4:3e:cf:a2:e8:84:d0:7c:ac:a9:97:af:
                    44:c8:c9:c5:2f:57:f8:94:d3:3a:22:5c:0e:d6:ff:
                    bd:4c:92:a2:73:a9:96:cd:87:dc:39:72:73:8c:b3:
                    4e:21:69:fb:d1:a9:fb:20:c0:98:53:bc:5c:59:35:
                    93:9f:52:02:b4:e9:d9:c7:8f:81:b9:2f:d2:43:4a:
                    6e:2e:5f:05:b1:fb:06:f0:90:e6:dc:55:69:6f:41:
                    60:9c:26:c8:0e:b7:e3:65:f0:f0:e0:98:68:3d:44:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:8A:61:30:38:05:E8:C5:11:2C:11:19:55:4D:BD:7B:DA:55:5D
            X509v3 Authority Key Identifier:
                keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:76:a8:22:4c:41:41:49:2e:98:0a:38:7c:2e:ab:90:a3:
         7e:a6:68:6b:b5:eb:75:33:ad:47:6f:6c:b2:a8:f1:33:4c:f5:
         64:49:ff:dd:db:14:34:0b:f8:9b:d6:e3:1f:ac:b8:ad:f5:49:
         bd:30:83:a8:97:6c:4c:08:da:09:8d:f6:d4:d7:78:d7:5f:b6:
         04:97:ef:b8:2b:36:2b:92:0e:88:b9:2a:ac:e4:d0:5f:f0:77:
         19:94:04:70:2d:8f:aa:d3:76:18:dc:cf:03:0b:eb:78:ba:3f:
         fa:cc:4b:7b:6f:af:3e:7a:9a:f9:46:e0:fe:05:1f:00:34:59:
         37:03:08:b8:02:1f:da:93:3b:32:01:ca:4a:37:75:50:ab:f3:
         22:4b:e3:d6:07:17:4a:bb:5b:16:50:a3:6d:06:c6:4b:9a:a9:
         96:44:ec:92:a8:ef:c1:b4:aa:c2:d4:87:c6:0e:47:ee:3d:60:
         e4:23:46:71:2a:74:bc:4e:07:75:dc:1e:f4:c6:d5:71:61:ea:
         ae:1b:74:b0:24:24:50:d2:a3:e9:af:e0:cf:c8:84:37:09:8d:
         3b:06:0a:e7:2c:28:4b:06:12:9b:00:7a:f9:68:06:0f:c3:ad:
         98:5b:dd:9b:bc:24:cf:92:ec:4e:44:93:35:cc:53:48:4a:03:
         4d:9b:13:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----