Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File:                     pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier:          84Mbb4dCOPrpmRUMXZKAeuyTtYpmvxKthHla5ZM1Hqc=
Subject key identifier:   28:69:41:A6:45:88:E1:A6:47:3D:FF:02:3E:3B:50:99:44:35:E2:A7
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer:       /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial:       01962ECF99C9029A4B8DF5643B645FB10C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=)
                          2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: UD8KNWU1uUZYnQo6apFGtpY6oTXfD0vvy8WfG9iICN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:99:c9:02:9a:4b:8d:f5:64:3b:64:5f:b1:0c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=286941a64588e1a6473dff023e3b50994435e2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:8d:aa:32:d9:b3:f3:26:0c:c6:f0:59:12:
                    e4:f2:a5:be:2a:55:d9:f3:00:fb:58:62:c1:9e:eb:
                    70:95:4d:b4:59:88:2f:17:58:26:82:55:10:ce:c8:
                    9b:73:4f:cb:7b:ec:a8:71:ff:8b:a3:89:3b:62:18:
                    e6:59:b2:fc:e3:85:1e:a6:1f:4d:02:2b:49:f1:c3:
                    3f:df:8a:3f:3d:a8:4b:f8:b5:20:f1:85:24:74:eb:
                    33:68:16:0f:a5:e6:2f:77:10:6e:c7:e2:a3:37:0b:
                    b5:99:f0:3e:b4:cb:95:03:07:40:7b:81:f3:44:1d:
                    76:21:e0:ba:b3:d0:b5:8c:c9:c8:35:ce:9f:49:5c:
                    ba:9c:00:b1:2d:d6:c7:53:f9:7f:4a:27:7f:40:d2:
                    fb:11:d3:41:05:b6:9d:bc:78:df:fd:ec:de:20:91:
                    58:a5:b8:fd:67:30:6f:21:f8:9c:26:f4:ee:5e:0e:
                    67:3d:84:67:84:6a:99:1b:48:e1:ef:bc:55:11:c2:
                    f9:cb:2e:0e:51:19:ce:e7:1e:3f:cb:dc:77:46:3c:
                    c0:e0:8d:ae:17:7f:15:04:97:9f:a2:0f:e7:9d:7d:
                    24:c8:b3:c2:d2:14:52:1f:fb:48:4b:34:98:1c:42:
                    34:5c:8c:8e:5e:16:8b:ea:d6:0f:4e:50:47:00:62:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:41:A6:45:88:E1:A6:47:3D:FF:02:3E:3B:50:99:44:35:E2:A7
            X509v3 Authority Key Identifier:
                keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6f:81:51:0a:30:bd:87:da:72:7e:34:e4:08:8f:8f:36:ee:
         57:4f:c5:1f:c4:d7:e5:4d:37:91:d4:4a:9d:b1:87:7b:9e:ed:
         f4:73:6a:8e:60:11:c9:c7:7d:81:b5:5f:bc:cf:12:0a:40:66:
         7b:05:bc:c9:7f:9a:df:df:25:d1:79:b6:d4:2a:59:bd:63:a4:
         1a:f1:c9:25:70:ef:f1:d1:50:f5:44:58:92:cc:b4:5a:16:1c:
         d0:85:10:e5:84:ac:0c:74:6e:69:65:c2:26:6e:5c:b2:c4:66:
         5c:8f:d0:86:07:14:2f:fe:6f:1d:57:62:35:f3:d1:3b:95:ac:
         96:70:15:2a:c0:92:e1:9a:fb:76:5d:78:cc:0b:93:27:54:4c:
         4b:ef:06:df:ad:5a:2a:2e:34:c1:20:56:9e:e0:34:f4:a1:69:
         fe:2d:7b:b8:19:71:4f:39:10:59:ef:54:f3:4c:18:4b:5c:bf:
         1c:33:52:a0:50:28:43:4c:8c:32:b2:b3:c5:ad:da:fd:1f:56:
         81:67:f8:d6:12:90:f4:57:a1:24:d1:32:ec:9e:cb:ce:65:22:
         42:c2:5c:2d:15:79:ff:35:0c:e9:23:51:b0:42:d3:4b:00:36:
         b1:d2:89:0d:8f:dd:52:b3:91:d5:ab:10:a5:ca:8e:9b:20:fb:
         09:91:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----