Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File:                     P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier:          RjRrbIm45KHnS/Is4Y/HzDXG2JMxw4xw63EyFbI648g=
Subject key identifier:   23:BF:8C:7F:ED:DA:2B:6B:34:90:EB:7F:D0:C6:30:BB:E2:47:0A:55
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer:       /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial:       01962DF4550713DFE6F35D747FEFB63C1AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: ZBzTIBrXYdnr/unMoiuAvM7bowu+/h0UHIt/LW/wUJU=)
                          2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:55:07:13:df:e6:f3:5d:74:7f:ef:b6:3c:1a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=23bf8c7fedda2b6b3490eb7fd0c630bbe2470a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:a5:20:16:43:d4:6b:eb:e0:93:64:59:e5:
                    89:42:3f:75:41:42:36:58:51:c1:70:6a:65:12:c5:
                    59:a6:a1:fe:6f:0b:f9:0c:48:bc:1b:91:6a:bb:1d:
                    6f:01:4e:1d:84:d0:ef:01:a2:63:51:d9:c6:7e:a6:
                    51:54:5c:9b:92:6b:e5:4b:6e:af:0f:db:79:a9:57:
                    e2:12:a5:a5:47:92:92:18:05:d9:8c:e3:ba:f6:dc:
                    da:b3:7c:24:11:65:28:f9:0d:a4:7f:33:fe:cc:38:
                    f1:12:71:22:cf:81:8f:00:18:2a:f5:eb:51:ec:87:
                    8f:31:50:6a:4b:f9:72:3c:11:f1:26:2d:76:10:fd:
                    0d:fd:ae:65:d2:ab:32:71:37:5f:5a:65:19:76:b9:
                    ae:90:92:0f:f0:e7:9b:bc:ce:bf:ba:63:d9:63:a6:
                    01:31:a7:5d:50:37:63:1b:00:e5:ea:c6:e5:d6:ba:
                    69:9e:d1:d5:2d:de:c3:be:e6:da:56:51:6a:7c:f9:
                    1d:f8:b7:1f:fe:45:da:67:25:ed:51:2c:e8:7b:23:
                    1a:d2:44:5a:4d:12:3f:40:e2:42:f6:7b:bb:49:4d:
                    76:f8:f9:ee:6f:42:91:6d:64:86:e9:dd:43:c6:bc:
                    95:39:19:5c:c3:da:30:cc:cb:ac:50:55:a6:64:c2:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:8C:7F:ED:DA:2B:6B:34:90:EB:7F:D0:C6:30:BB:E2:47:0A:55
            X509v3 Authority Key Identifier:
                keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:ba:6d:82:f3:f8:0e:2c:5d:af:cb:fd:5b:48:13:76:7e:
         ef:d5:29:15:af:36:5e:e3:b9:8c:5c:89:83:44:25:76:59:69:
         0b:1a:dd:0a:c3:14:9b:56:85:20:dd:da:4b:d5:87:ef:5a:1f:
         7e:9f:60:fd:fc:e0:52:f4:5e:44:78:a1:d3:37:27:18:28:29:
         6b:3a:46:a4:28:1b:26:00:16:bc:1f:f4:28:30:df:f9:f9:7c:
         00:1b:45:0d:78:59:aa:2d:fd:f6:56:ab:b2:19:3a:dc:d2:a7:
         c7:d0:93:a9:d6:46:d7:df:77:5b:b1:0b:cb:4d:21:55:d0:e4:
         b0:69:b2:b7:93:cf:f8:c0:a9:04:34:03:e7:25:85:4f:ac:32:
         0a:86:8c:b4:e2:2b:d4:cc:93:e2:df:19:b8:b6:cd:d4:c2:bf:
         4f:3e:19:8e:1c:ba:f4:50:31:46:2b:47:c5:1a:72:6d:92:71:
         04:fb:0a:3e:a4:1e:60:81:83:b4:e3:fb:3e:13:46:e4:62:2b:
         e8:56:82:1a:dc:c3:3f:35:41:76:c1:13:c4:7e:98:ad:15:2b:
         65:bf:e9:09:47:8d:bb:5e:d3:f7:77:76:c1:c2:32:3c:3f:54:
         65:c1:85:c7:bc:e2:8b:bc:bf:3e:21:d2:98:fe:47:6b:47:d9:
         7e:e9:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----