Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier:          Z07X1acwjSxPlZ07d4H4IhV8y3BZ4PWqo3+MZP3qHfQ=
Subject key identifier:   E8:46:B5:F0:24:84:B2:4D:C3:6A:0D:A9:15:3D:4B:F4:3E:71:34:23
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer:       /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial:       01962F3DE07ADE58466B67599217C41468C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: tJ5nD9xet1h5yQkYcZ7N1+28tVz5eaQjCdteTd225LI=)
                          2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e0:7a:de:58:46:6b:67:59:92:17:c4:14:68:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=e846b5f02484b24dc36a0da9153d4bf43e713423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:2e:d3:d0:61:bf:80:83:27:12:e0:f2:d9:
                    21:97:1f:58:66:71:f7:04:eb:d2:b9:1b:96:e4:22:
                    97:37:7e:00:2e:a6:fe:ac:b3:56:40:43:db:5d:d9:
                    85:59:40:ad:08:cd:c1:bf:70:26:37:2f:08:cf:d7:
                    42:01:89:44:88:32:a1:18:d4:a7:91:74:f6:f4:f5:
                    b3:9e:3b:49:55:f6:97:c6:1e:c3:3a:96:ec:1d:4b:
                    ab:00:88:0c:68:08:ee:d1:c9:3c:6b:c7:ad:04:aa:
                    af:75:47:9f:60:fb:48:85:6d:df:14:a7:34:fe:76:
                    dd:d4:06:51:3c:e3:ea:c8:43:a1:f1:b5:65:93:d0:
                    b3:1b:4a:b4:93:ab:11:bc:3b:de:7b:93:1a:ec:f5:
                    f7:9c:b0:66:c7:ff:f7:54:5c:3c:2c:e3:92:0f:45:
                    f4:3b:11:ed:51:b5:c6:f7:13:ec:f2:b0:dd:b8:a0:
                    e5:de:cd:86:7a:61:7a:36:46:32:f9:fa:e5:16:27:
                    53:eb:f3:c2:3e:60:19:77:7c:df:54:19:85:e6:79:
                    0e:60:55:ef:11:bd:d5:0d:6b:32:50:96:ce:98:26:
                    4e:70:5e:42:37:10:1d:b0:37:33:12:e4:bd:3c:75:
                    85:e6:67:7e:ac:5f:4c:e3:11:d0:dd:9d:ac:05:e6:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:B5:F0:24:84:B2:4D:C3:6A:0D:A9:15:3D:4B:F4:3E:71:34:23
            X509v3 Authority Key Identifier:
                keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:26:1d:55:9d:59:d8:c1:7e:19:7a:75:73:23:3a:72:be:
         62:be:9d:22:24:b4:6b:28:ce:03:08:29:41:b4:4a:3d:6e:ba:
         5e:fc:7a:52:d4:af:32:2a:17:f3:0a:03:b6:d3:c6:c9:ee:bf:
         b4:0b:4a:a6:1c:a0:e4:41:36:45:17:15:0e:e4:c7:d9:8f:59:
         98:28:6c:a5:a8:ea:ec:a6:b7:a4:9b:df:c0:b6:76:d1:a0:b9:
         3e:d7:f7:3c:ff:7f:74:6d:3f:16:ee:51:d6:cf:8d:b2:1b:06:
         a9:b4:93:8a:f6:bf:dd:70:f8:46:12:ba:4b:48:b7:be:7a:1b:
         fc:0a:62:52:6e:ae:27:f8:90:33:4a:9c:b5:4c:62:af:c9:70:
         f0:50:5a:21:75:52:a0:b7:e0:2e:c0:43:00:4a:29:59:3d:f1:
         9d:41:73:81:45:5d:71:0b:47:49:3c:49:c7:ba:ed:c9:de:4d:
         80:5e:b5:16:9c:f0:b7:4b:58:19:9a:8c:b8:e3:13:84:26:4d:
         a3:a6:c0:46:58:56:69:45:e3:0d:dc:2a:eb:12:62:d6:da:88:
         30:00:39:48:ea:8d:00:f0:65:fe:4e:2f:d7:21:50:21:b8:16:
         f1:ec:0c:27:e9:0c:21:98:b6:64:c8:3a:7c:97:eb:31:c0:c9:
         43:5e:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----