Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File:                     3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier:          m867xGfmOOgFucVsINfChcEsaMHA487NGOatQTMnFNQ=
Subject key identifier:   B5:7C:50:9F:FC:2D:61:9C:AD:5D:6E:9F:9A:91:5E:04:B4:AD:37:56
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer:       /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial:       01962FAB699E3BAF89E2DE606C06D488BA2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number:          0452
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: +Fwd3s66BAXgd16KUF7CuD6yHPT18WafdNiamdzfFX4=)
                          2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:9e:3b:af:89:e2:de:60:6c:06:d4:88:ba:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=b57c509ffc2d619cad5d6e9f9a915e04b4ad3756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:21:d5:22:01:59:65:5a:0f:c1:59:4d:99:
                    11:de:a8:0c:63:c7:cf:e7:24:f9:49:35:d4:76:c0:
                    4e:9e:53:30:dc:bf:29:76:85:29:75:b1:05:a4:68:
                    48:59:f7:86:52:9b:6f:5a:d9:c6:3a:f9:4c:f0:14:
                    86:0a:88:d2:6e:cc:55:08:84:60:87:86:39:53:2e:
                    e3:b4:af:1c:68:ff:24:ec:a7:2d:b6:74:a5:e6:d1:
                    7b:ab:44:79:14:8e:93:f6:b0:d3:5c:4d:03:9e:4e:
                    21:e7:9b:54:0f:6d:00:ae:37:34:f0:42:bc:a2:d4:
                    db:d4:ec:87:3e:df:3d:1b:49:81:e7:02:9d:90:f5:
                    3a:9f:63:89:5d:77:13:76:79:33:e4:2f:68:54:ca:
                    90:49:58:51:be:16:c6:aa:a2:54:f5:09:3e:37:a8:
                    ad:84:9a:8f:15:02:2d:81:f7:d3:1c:a9:77:6f:a5:
                    0c:0e:0a:bd:f3:38:9d:bf:b7:e6:38:7c:17:96:6d:
                    b9:33:9a:58:83:f8:1e:e5:2d:28:1b:7b:cf:fd:ee:
                    ba:df:ed:4d:2c:99:ad:e1:b7:2b:c5:e1:b9:de:ce:
                    95:f3:b3:46:26:c3:70:97:cd:14:a6:d9:12:d8:29:
                    c9:53:88:45:07:d5:86:90:aa:0a:9f:fc:1a:6d:50:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:50:9F:FC:2D:61:9C:AD:5D:6E:9F:9A:91:5E:04:B4:AD:37:56
            X509v3 Authority Key Identifier:
                keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:93:21:b9:a2:5d:a4:52:7f:74:1b:ad:e6:f8:a3:28:87:8a:
         0c:46:0d:09:0d:1f:e7:0d:b4:08:1a:f2:51:9a:35:b7:ea:8c:
         97:5e:ff:4b:d4:e6:ab:c5:37:3d:03:a7:c8:86:4d:f5:33:60:
         39:9e:ba:55:96:95:93:8b:b5:02:a9:65:bb:07:18:54:81:57:
         84:3d:6c:1f:a4:16:a7:11:e5:60:ff:89:09:a5:37:f8:af:d5:
         dd:66:e1:01:a8:a9:b8:b0:f7:d9:8c:73:19:b6:ef:4b:31:4f:
         29:29:4c:92:93:1c:b7:b9:f3:48:02:29:6a:ac:e4:e7:36:a0:
         db:b4:ad:dc:55:bf:d4:30:e0:8c:10:3b:c5:f6:2f:de:a3:b3:
         18:c0:21:cd:32:5e:f8:80:71:a1:6c:3b:57:06:ea:c8:71:cb:
         8f:84:7b:9b:71:a0:fe:bf:2d:f4:5b:53:d0:c9:89:6a:fa:c2:
         b4:d9:fb:f0:7a:d7:1e:5c:aa:4e:85:cc:fa:d4:5f:98:81:28:
         c4:07:79:73:2a:ed:a7:9c:e2:5d:8e:06:cf:e4:c5:ec:ac:3d:
         c6:ea:ba:05:73:98:69:ff:a9:45:1b:98:f6:f4:97:27:59:1d:
         3d:4a:2b:a1:28:3d:00:0c:7b:71:32:de:99:20:6f:dd:79:57:
         4d:2a:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----