Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File:                     PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier:          KWChO8bdviPYPMCS3ZWrluo/ozrK3S4mTgt0UV9sSLc=
Subject key identifier:   6C:D1:E5:87:DB:D1:C2:94:6E:2F:04:B7:28:F8:A2:EB:42:CC:D8:C4
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer:       /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial:       0195E15955FCDE67B5F74A6BE56A4D5891D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 10:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:23 +0000
Files and hashes:         1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: 8AmorDSdyxamEi3ESxa6/7lrQt3I1TvMzmv3XO85Lfo=)
                          2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:55:fc:de:67:b5:f7:4a:6b:e5:6a:4d:58:91:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
        Validity
            Not Before: Mar 29 10:01:23 2025 GMT
            Not After : Mar 30 10:01:23 2025 GMT
        Subject: CN=6cd1e587dbd1c2946e2f04b728f8a2eb42ccd8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:7c:d6:c8:c6:b4:06:42:81:2e:46:33:0e:
                    4c:a0:5c:b1:22:22:4b:45:34:b8:25:e0:73:3b:19:
                    65:a3:7a:4c:99:3b:81:0d:b0:f5:f7:1c:65:27:42:
                    10:da:25:1c:76:4f:53:e1:8c:e3:7a:ca:f0:26:6f:
                    ac:f4:27:92:f0:5c:1d:34:45:de:1f:42:37:ae:29:
                    3d:fb:bd:eb:f7:8a:f5:85:81:86:95:96:86:45:4b:
                    94:df:f7:bd:4a:bd:1c:83:ee:54:b0:b7:01:92:a8:
                    05:ac:cc:d5:72:33:d0:cf:09:a4:8c:44:d7:f9:60:
                    62:9f:59:c4:0b:19:c2:8b:9c:d1:54:86:f7:b7:89:
                    3d:06:3b:48:71:ee:66:7b:2f:80:24:6e:bf:29:62:
                    72:83:fc:e3:08:85:03:0d:88:9b:a1:78:6d:22:56:
                    78:54:a9:68:cb:db:93:16:ee:c0:7e:0c:77:71:7b:
                    67:13:d4:f0:ca:0b:67:87:ac:ca:fc:65:d7:4c:b7:
                    3e:ac:ac:c4:25:bd:fd:3e:2e:11:ea:39:20:e6:01:
                    32:de:72:d4:83:2c:4f:c5:0d:b4:e1:5d:11:75:96:
                    b0:06:99:ff:72:3a:2d:86:64:d0:7d:c2:8d:88:88:
                    10:6e:c8:55:57:46:ae:55:aa:76:36:d2:2a:9b:0e:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:E5:87:DB:D1:C2:94:6E:2F:04:B7:28:F8:A2:EB:42:CC:D8:C4
            X509v3 Authority Key Identifier:
                keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:4d:ba:cb:17:51:87:0f:21:da:58:7e:29:0a:5f:71:38:
         85:d8:5c:09:47:a6:48:d0:f3:e4:88:e2:91:9b:0c:d0:60:32:
         1b:40:8f:b0:fa:7d:50:ca:2b:95:c2:30:a6:e9:58:a8:e3:ce:
         f9:cc:0a:f8:76:29:3b:81:fb:ea:43:dc:75:97:90:1b:23:c6:
         f0:6f:eb:61:b4:42:27:75:43:3c:55:87:7b:31:1e:0b:af:14:
         76:4a:07:ca:1c:9b:a9:85:c9:69:81:5f:2d:6d:ba:17:bd:31:
         50:8e:02:3b:b6:43:1d:e3:08:58:38:b9:36:b6:d1:7e:ca:20:
         c5:87:8d:a1:6c:1c:78:da:35:b1:38:9b:28:33:be:23:52:df:
         2e:2d:8f:dd:0f:bb:9d:e3:4d:70:7b:e5:83:13:64:9d:ec:76:
         9c:14:ce:cc:dd:f4:a2:2b:4c:ff:41:40:d2:12:fd:1b:dd:b1:
         1e:de:e4:38:7f:b9:40:dc:66:7f:5c:a4:3f:ec:d2:3a:db:f1:
         ac:06:a8:de:8f:92:53:bc:00:4b:1a:5d:aa:2b:58:9f:a9:0b:
         80:4c:ad:81:96:3e:80:a5:28:27:22:33:04:e4:f3:85:de:ae:
         52:8c:2b:b2:39:25:89:37:9b:02:8b:45:66:3b:e1:51:d3:9b:
         fd:26:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----