Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
File:                     PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json)
Hash identifier:          nA2NbWIil10KTp3Y4hNt++C3XXZqheuEYk4pUPcFI/c=
Subject key identifier:   1A:F0:25:92:CF:F3:8F:8F:B5:10:B1:F1:0E:EC:F6:FB:F8:78:81:07
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Certificate issuer:       /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial:       01962E9986E6FCF9866AE6D01C4940DF8408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: 43am57Lpcar3/9MQyZdchPVJL6GnLuGw4DGI7ON40WY=)
                          2: tlchQmDxgjTRo1pLaspfZw12O3A.roa (hash: 6bDu460ilvbyFwMJbm1Vw+QewREO9nGYqnB3iYaAR4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:86:e6:fc:f9:86:6a:e6:d0:1c:49:40:df:84:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=1af02592cff38f8fb510b1f10eecf6fbf8788107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:ac:8e:56:f7:e8:22:cf:83:8d:e1:52:b7:
                    95:dd:26:d8:7c:fc:7c:86:41:86:ac:4f:fd:52:ab:
                    bb:bc:25:05:61:ee:50:f5:70:74:a8:4d:9c:4e:63:
                    d6:1f:da:e2:9c:10:0c:ba:27:5d:4f:f8:03:d2:5c:
                    08:3d:a2:22:c3:9b:22:20:49:66:da:28:cd:91:95:
                    fd:95:cb:17:c7:1d:ba:45:82:12:83:15:b9:fb:be:
                    53:34:b8:f0:70:9f:61:c8:88:d2:92:bf:93:92:a5:
                    f5:3b:89:b5:9d:52:03:c9:d3:9a:27:82:9e:a0:09:
                    c9:0e:5d:7a:9a:2b:0c:02:66:c8:a1:e4:88:75:fe:
                    84:f3:55:7f:b3:c1:ce:c7:e0:9e:29:67:66:da:14:
                    d2:26:e0:4c:33:78:d6:37:18:5c:44:bc:1d:03:16:
                    2b:18:5f:de:9f:15:4c:89:c5:1e:5c:27:4f:68:8b:
                    92:6d:3b:c0:0a:75:6d:4c:59:a0:18:45:1a:3b:b3:
                    60:f3:c8:9b:2a:91:39:c2:93:8a:11:45:2d:6a:6e:
                    55:83:bd:cd:ab:72:64:db:e5:68:04:a8:67:14:d3:
                    d9:56:f1:a6:e4:61:8d:5c:10:db:dd:09:c4:15:21:
                    3f:8a:86:2b:d2:1b:3c:95:b4:97:c2:8b:8e:c9:1f:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:25:92:CF:F3:8F:8F:B5:10:B1:F1:0E:EC:F6:FB:F8:78:81:07
            X509v3 Authority Key Identifier:
                keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:90:0b:18:3a:1f:81:a5:dc:c6:fc:3d:73:d1:64:8e:66:
         7f:90:ef:25:6f:7b:5c:9a:dc:8b:65:66:b9:92:83:54:99:eb:
         8c:03:38:6a:17:c6:57:12:97:f6:d6:cd:e1:4c:09:66:24:f1:
         e3:4f:78:e1:05:f2:2c:5a:5b:a0:2a:64:53:58:c1:66:b7:c9:
         13:75:a9:be:25:19:bb:9c:47:d6:da:2e:6e:c2:97:bc:f7:97:
         ca:df:8d:1a:29:af:73:24:c4:68:1a:8b:75:06:cb:66:eb:2a:
         ea:db:be:8c:2c:3f:fd:64:50:d7:3f:4e:45:3a:63:b0:b5:d1:
         ee:ec:c4:ae:ea:43:f7:df:b4:ea:e5:a5:6b:23:d1:e9:27:bf:
         ef:76:11:33:ee:ed:af:04:08:ba:f3:e9:31:8f:13:09:ad:6d:
         8e:ce:f6:9d:77:9d:72:17:4d:9f:29:a5:f9:b6:a5:9e:57:58:
         61:9a:8f:81:30:76:d9:ac:3d:ac:ba:6a:1f:bf:b5:7c:2c:39:
         ee:fc:31:c9:1f:60:17:27:e8:90:ec:1a:b5:09:0b:be:02:48:
         ed:d0:7b:24:4c:39:4f:ad:39:96:ec:62:c4:e0:10:9f:28:a3:
         8b:a1:d8:1b:58:69:06:72:79:0e:20:e7:aa:e1:f4:8b:8d:79:
         d5:ca:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----