Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File:                     pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier:          PYr1jBbsvu+Oe+JP7KFw+LW2j4xmgXvr8VM9nuypavI=
Subject key identifier:   D4:19:E6:7E:DF:ED:06:58:1D:7C:91:44:CB:D4:80:77:C4:50:CF:9D
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer:       /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial:       01962F3D66267867A4E9D7C5FC982ADE7482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number:          12C1
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 3nrrtsZJ-IpATR6f6X0fXP8P3Ds.roa (hash: dHLYJp8vBdcpEI62KQkymjAsJXGywGpijB0UQKFJ6p4=)
                          2: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (hash: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=)
                          3: o-IAHNtlfJTe0lrMjkAn3EfKWfQ.roa (hash: 4yZoP16QAdZ03Ygf8PchIKIjGuMurg8hghXjeARQmNw=)
                          4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: gHCPnXxt8llwEv70xm/WGjhqxzMKimbdur8ODg27T2M=)
                          5: z9pY0mNZw1275Un36HrGri4KO4o.roa (hash: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:26:78:67:a4:e9:d7:c5:fc:98:2a:de:74:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=d419e67edfed06581d7c9144cbd48077c450cf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:4d:2b:0c:04:ad:82:52:bd:35:83:ab:82:
                    79:3a:a1:9f:56:ae:c9:4f:80:cb:50:5a:67:14:22:
                    0d:3f:70:38:61:86:70:19:13:ef:f6:72:58:35:72:
                    e8:b6:95:fa:09:02:87:09:b1:9b:00:fb:d8:63:38:
                    0c:94:92:48:97:d6:7b:c3:b4:5e:a6:53:4b:bc:68:
                    c2:b9:97:93:b0:d2:68:8e:b2:20:32:db:c4:f1:6b:
                    74:b9:4e:79:62:e0:95:3e:4f:18:4f:ae:92:5b:c9:
                    22:01:b6:83:4b:08:a6:db:1e:2f:cd:2c:f4:94:a9:
                    90:b2:2e:8f:ee:a2:9d:7f:c3:28:d9:75:ed:32:ef:
                    45:b1:bf:69:36:25:2e:7f:53:4d:cf:8c:82:ef:31:
                    fb:51:7d:cc:98:14:41:46:d0:bd:67:59:d3:78:ee:
                    66:7d:8a:03:1e:59:05:93:86:33:27:a7:2b:6f:2f:
                    b8:2c:b7:2f:79:48:60:0d:36:e7:3e:ed:2c:93:14:
                    30:80:06:d7:78:f4:a8:1b:8e:b0:54:a4:d3:3f:7a:
                    5e:1e:a6:84:86:a9:81:e5:c2:da:60:b4:c6:55:53:
                    66:c5:b1:7d:5e:89:df:9d:4f:19:f7:b5:66:d8:92:
                    1b:88:30:45:6d:31:2f:e1:06:f5:cb:85:af:75:9f:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:E6:7E:DF:ED:06:58:1D:7C:91:44:CB:D4:80:77:C4:50:CF:9D
            X509v3 Authority Key Identifier:
                keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:99:44:a5:c7:67:e3:fe:b7:c5:96:66:e4:83:35:76:95:59:
         50:9e:8f:cc:5a:65:91:9a:ac:43:92:01:14:73:7e:ba:b7:11:
         9c:19:c8:3f:e1:82:d8:fe:d1:be:77:55:47:42:57:69:e2:2d:
         9c:fc:9f:95:f7:da:9e:80:f3:ca:0f:51:b8:c3:49:64:4e:98:
         2f:2f:ba:1c:4a:96:5c:9a:d5:f8:bb:76:a6:60:f0:0c:36:09:
         3d:ac:2b:41:df:fb:e7:63:2e:f3:b7:5e:fb:08:32:a2:40:a7:
         51:94:a7:bf:7e:49:46:58:40:b6:01:8b:d7:f2:81:7e:70:8c:
         e6:bc:cd:23:a3:de:98:80:f3:ff:aa:c9:1f:e7:0f:bf:d6:be:
         72:71:77:5c:be:35:df:74:a1:d6:86:13:00:bb:d3:c8:a2:9c:
         fd:c4:45:ee:73:c1:a3:33:66:eb:73:93:7d:82:55:f0:40:46:
         53:59:5c:61:30:b7:75:9a:50:c8:31:f0:d9:94:71:9f:a4:ed:
         86:7f:d4:41:96:48:19:16:59:b0:7b:60:54:3a:d9:83:5c:82:
         7d:3d:2e:d2:a5:c0:8e:fe:62:97:fb:51:13:72:26:f6:fd:6b:
         d8:b9:0f:09:38:26:68:63:fa:4d:7c:53:20:64:ea:20:d7:11:
         f2:3d:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----