Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File:                     p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier:          YQLiv5WfVg9nFJGlhwU/7bskMsWbBmQvAgbYGUMFFOo=
Subject key identifier:   51:F2:14:BC:77:74:6B:CD:B6:8F:FA:BE:FB:7E:64:77:AB:57:C8:E9
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer:       /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial:       01962E98CD86A128AEC56057F9CF13FE980A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number:          05D1
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: lZ0k4HCeYgJ0Z--pVxoJOUL75A0.roa (hash: Eir5xG3bxnWZXnAYjpN3gzblSfPJDFtKlMunMUTHMBs=)
                          2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: GdASQc5LmHAEQ9cNc9YQrIgpqIrNwwUeE+9yhQJTMQ8=)
                          3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
                          4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:86:a1:28:ae:c5:60:57:f9:cf:13:fe:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=51f214bc77746bcdb68ffabefb7e6477ab57c8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:b5:e5:99:f6:a8:cf:7a:5a:d7:d3:56:26:
                    b0:b7:df:fe:c2:ed:da:68:db:78:14:64:d1:79:21:
                    90:5d:94:fe:9f:25:40:fa:6d:07:91:3c:64:f6:4b:
                    52:00:93:dc:b6:d4:2c:97:cc:29:9e:d4:62:42:d0:
                    6e:3d:39:c7:3b:2e:e2:1e:0e:54:bc:a4:d6:e6:4e:
                    f2:de:d5:4f:49:af:db:c1:84:b4:fe:14:21:9d:ad:
                    2a:d2:b9:58:39:b9:b1:a4:cd:41:08:6d:f6:63:40:
                    8b:c6:c2:94:82:9b:d8:f3:23:07:c7:6f:36:22:82:
                    1b:2d:5a:c6:29:80:99:57:92:0d:77:47:59:f9:7a:
                    42:09:d9:ae:37:dd:b1:cb:e4:c7:37:1c:8a:e3:0d:
                    37:86:ee:f9:d7:94:09:16:42:3b:e9:08:23:b4:4d:
                    98:92:9f:5d:61:16:fe:06:3e:82:6a:0a:03:42:84:
                    62:69:97:f8:48:74:1e:6d:d5:52:15:1c:af:09:a2:
                    46:68:03:43:fc:3e:c1:13:0c:0b:2c:e9:11:69:a3:
                    13:26:1b:f8:3c:bd:40:20:9f:85:a4:dc:fe:fe:a7:
                    8f:72:7c:de:24:ad:c4:7f:97:f1:a3:62:d6:2b:ca:
                    29:4a:a7:08:1b:38:10:78:da:67:f7:85:f1:bd:05:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:14:BC:77:74:6B:CD:B6:8F:FA:BE:FB:7E:64:77:AB:57:C8:E9
            X509v3 Authority Key Identifier:
                keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:fd:41:f1:77:e4:51:f6:aa:b9:63:f8:ad:95:92:a2:00:
         e3:76:48:3c:9b:d6:84:73:35:d1:01:5b:ff:c1:65:af:b0:2f:
         19:47:90:f2:31:03:38:a7:43:f7:02:d8:9f:02:fe:a0:3c:30:
         6f:64:46:c5:95:ea:30:00:c0:3a:10:13:01:b9:84:78:5e:de:
         76:a3:08:aa:51:e4:8d:04:28:ec:ac:6a:7b:e1:93:97:fc:39:
         eb:d3:b9:80:9a:bc:4f:63:2a:01:d7:b1:d6:d3:8c:6d:e5:99:
         2b:6b:fc:c3:0a:f7:8d:85:48:0f:1d:61:4d:9e:9c:98:7f:14:
         df:9d:b8:0d:50:37:fd:07:83:2d:3a:bc:7f:f4:94:52:69:df:
         76:b7:a6:bf:8a:ba:36:d2:02:a4:42:4e:91:be:71:ca:99:a5:
         43:09:82:9c:d1:03:7d:96:4e:37:dc:d3:88:1d:f6:e9:d9:59:
         62:84:80:a6:0e:86:06:3f:b9:23:d9:2f:9e:d4:dc:70:bd:ce:
         21:7e:46:dd:97:ea:69:3c:cd:bb:14:fc:7c:1f:9c:eb:de:68:
         d2:d0:56:73:0c:1f:72:b4:e9:d0:15:7a:06:60:3f:5c:e8:7f:
         9d:70:2f:7e:bf:e2:e8:80:f4:d2:80:df:49:ca:06:60:6c:f9:
         53:15:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----