Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File:                     v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier:          aomvizVcsimii/FgquNQkzoToT4oKac73/oPz8wyIPE=
Subject key identifier:   3F:56:2A:97:59:44:09:E2:A8:94:78:F6:B9:CE:A9:33:06:70:DA:D3
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer:       /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial:       01962ECF64150932488786F4117C72DB3426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number:          0C5F
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
                          2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: 3D6MGzeKiyB6sw7GMGCpIjCR6/Oe6LFBhXq46pogncE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:64:15:09:32:48:87:86:f4:11:7c:72:db:34:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=3f562a97594409e2a89478f6b9cea9330670dad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:ed:c1:09:6f:50:d8:8b:2a:f6:89:ba:90:
                    ac:30:88:b5:bf:13:66:63:9d:f7:dd:3e:07:30:97:
                    28:2c:2e:41:16:d7:96:92:2c:09:a3:c6:12:ae:ab:
                    29:b1:22:ee:14:44:f1:92:b6:86:bf:91:c3:d7:8d:
                    b8:37:b4:99:1e:f7:71:af:22:ea:40:aa:ad:f5:cc:
                    54:66:8b:03:f5:90:85:c0:0a:e6:a1:a6:c1:73:54:
                    b8:11:51:23:a1:71:41:10:44:5d:78:70:be:a5:a3:
                    07:23:d6:c0:2d:ad:53:65:56:d0:eb:8c:6b:09:7e:
                    be:c0:8a:28:b8:09:02:8b:dc:bc:9b:e0:2c:5f:40:
                    ad:37:c0:02:b0:7a:16:a8:88:fe:53:47:d8:4f:b6:
                    53:74:29:4e:7f:c4:83:4c:ed:60:a6:0b:aa:18:21:
                    f5:d7:5e:65:c4:e9:d5:50:de:a6:dd:dc:da:90:7a:
                    a7:17:63:e8:36:4d:df:a1:06:db:65:5f:af:cb:8d:
                    49:8b:65:ea:f0:8e:2a:1a:03:a7:e8:6f:be:09:5c:
                    78:fb:60:fc:c9:12:8a:0c:57:af:96:50:7b:fd:34:
                    1c:6f:0c:79:76:0a:59:b7:cc:de:73:1b:e8:c3:2d:
                    9e:16:27:7c:f9:8e:39:ce:a4:6d:50:0e:b5:9a:c4:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:2A:97:59:44:09:E2:A8:94:78:F6:B9:CE:A9:33:06:70:DA:D3
            X509v3 Authority Key Identifier:
                keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:63:db:b6:da:81:01:12:af:07:64:55:db:83:bf:ae:5a:e1:
         0f:55:93:a2:a8:22:44:c8:26:95:b8:a6:6e:f0:22:24:70:42:
         eb:38:5f:da:86:81:8f:b7:5f:98:0f:b3:e0:eb:33:63:9e:65:
         53:5f:75:c2:4e:d5:6e:cf:37:d7:94:f7:bb:cf:bf:9c:e2:f6:
         d4:af:ba:ed:ff:c2:71:59:6d:52:b9:78:36:5e:af:07:5f:8d:
         65:d7:c2:7c:ca:94:4e:22:1c:57:0a:b4:99:ca:17:25:4b:d6:
         95:2b:a0:90:ce:90:78:0a:b9:10:cb:aa:78:68:de:98:43:0f:
         5f:fc:c9:38:17:eb:cd:28:b3:1e:0e:89:95:23:6f:c2:a3:f0:
         72:59:ab:63:35:e1:b3:41:10:d2:88:cf:58:55:5d:13:f6:b9:
         61:b2:39:77:44:58:ad:54:6e:3f:eb:aa:4e:e9:43:26:87:21:
         02:84:99:24:9a:ea:c6:71:50:e3:aa:ea:c1:37:75:67:96:0b:
         45:72:08:3d:97:35:b6:b6:bd:16:6c:63:d0:0e:66:a1:6d:c9:
         ac:0e:7f:9d:39:52:4a:5c:98:21:35:73:a3:b0:37:24:86:02:
         7d:0c:2e:f1:f7:bf:ad:89:9f:48:64:a6:13:66:ec:3d:73:2d:
         4a:a7:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----