Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File:                     pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier:          oaRRMImyv4j5+sJYxYW/C1tb7F2t+BR51mjjciJivcg=
Subject key identifier:   4F:F7:B4:7F:9B:B1:37:27:A8:56:53:62:D3:DE:CE:AC:A7:90:35:4A
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer:       /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial:       01962E9900BC69D2966DBE702608E539BC21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number:          0B85
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
                          2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
                          3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: f3zWcI3cinkASS2+wVbhEjpLmvfAW4YdKbR+jhhgxN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:00:bc:69:d2:96:6d:be:70:26:08:e5:39:bc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=4ff7b47f9bb13727a8565362d3deceaca790354a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:5a:45:cf:e9:29:7c:a7:4e:43:bc:d2:f0:
                    4b:a3:c6:45:fb:0b:c0:16:39:86:1b:ab:39:2a:42:
                    3c:4f:15:ed:35:d6:e6:e2:89:07:bc:ea:2d:5e:8b:
                    bd:af:e5:b9:4e:f0:cb:26:9b:a0:8e:75:e6:19:14:
                    74:a9:d7:15:5f:3f:9b:45:3c:bb:9d:96:ea:62:55:
                    94:0e:0f:7b:5b:84:0a:b2:e8:a9:78:a1:a6:9a:8a:
                    5b:9f:60:51:7c:f8:cf:f5:a5:df:37:9f:5a:c9:cb:
                    b0:cc:79:fb:5d:70:8b:9a:58:56:4b:94:3a:b3:cc:
                    33:c9:1f:93:06:e7:8e:cc:09:09:f7:32:92:b4:17:
                    a6:2c:49:8c:cd:95:6c:5a:32:cf:de:e4:eb:31:f0:
                    58:12:3e:5b:fa:86:35:0a:0d:1d:17:ea:b5:d9:d8:
                    2d:06:f5:bb:70:12:c7:6f:b4:a4:9c:73:07:47:42:
                    08:9b:c7:ac:bd:23:11:83:80:de:a0:c0:3d:e0:e3:
                    a7:d3:a4:59:e4:44:1d:76:b4:7f:66:6a:8c:78:55:
                    30:5f:37:82:f2:54:ac:0b:ae:6c:ea:0c:8e:93:28:
                    be:b0:ab:a5:b4:0d:f9:c8:73:27:ad:62:ce:21:12:
                    b9:3a:ad:13:fe:9a:87:9d:89:51:85:e2:ea:62:47:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:B4:7F:9B:B1:37:27:A8:56:53:62:D3:DE:CE:AC:A7:90:35:4A
            X509v3 Authority Key Identifier:
                keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ad:21:5b:3d:d9:e1:6e:2c:52:30:85:16:ec:ac:43:15:00:
         9e:c4:fd:6b:0d:3d:50:8d:f3:21:fb:47:75:15:1e:30:b7:12:
         28:55:4a:3f:1f:5e:8f:90:23:86:01:10:65:b1:1c:d6:b9:ca:
         35:9e:9d:6b:dc:53:e1:61:a8:0a:a7:8a:22:c7:7b:29:c5:d2:
         18:33:e8:b4:7e:b1:74:64:95:77:63:20:e8:c2:fe:25:fb:15:
         23:8a:de:e9:84:67:6a:5b:20:ac:21:d9:b1:b3:11:e7:3a:03:
         63:8e:48:a4:f8:37:83:ac:d9:24:b1:80:ea:26:d3:25:6e:2e:
         9b:a7:2d:f6:dc:67:a3:f0:7e:ae:f7:7d:13:0e:b8:bb:13:f7:
         a7:47:14:6c:64:31:67:55:8f:3a:90:f8:f8:19:37:16:fb:8e:
         58:f1:ae:85:92:a9:31:b7:de:8c:91:65:da:67:6b:28:94:be:
         5b:f6:bb:e0:dd:84:d3:23:4f:3c:c0:ad:a0:0c:44:1c:bb:3b:
         87:5d:87:56:e1:3a:c6:09:1d:b4:5d:1e:bf:b7:8e:b4:ad:72:
         f6:94:2e:58:64:d8:b4:05:94:ec:17:d0:0a:02:b9:ea:8f:a0:
         52:05:33:ef:00:5d:97:84:e2:53:fa:0d:82:45:9f:2a:e3:7e:
         08:8b:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----