Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File:                     p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier:          /9t/DSJLXZ5Sk3V0A16QoY7ikW6urVz5w/DEz2P94js=
Subject key identifier:   42:47:C8:12:49:01:03:3F:56:D6:05:14:02:7D:C0:53:57:93:D1:7B
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer:       /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial:       01962FAB58B94BF7AC435ADCB6CB9DB23A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number:          0456
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
                          2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: 6GjEADceWLLL+uhUUgwV9cBm3e/n3LxI9GwbOwknuXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:b9:4b:f7:ac:43:5a:dc:b6:cb:9d:b2:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=4247c8124901033f56d60514027dc0535793d17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:b6:ea:81:b8:98:c1:14:cc:61:16:28:02:
                    78:b7:0d:4f:ff:28:f3:f7:07:00:1c:54:c9:2a:bb:
                    5b:a3:e2:ca:0f:b8:78:71:be:6d:02:d1:f3:ea:b6:
                    67:96:7e:35:d3:81:19:9c:1a:3f:c5:65:bb:d3:24:
                    73:24:a4:0f:e7:dc:3a:26:70:05:80:9e:c4:13:42:
                    b3:0b:19:fe:7f:ee:dc:a4:cc:93:ec:dd:ae:6c:3f:
                    c1:6e:ed:0c:f9:57:b3:d1:3e:43:8a:e9:5f:69:ee:
                    93:06:69:15:04:34:7e:45:bc:3c:2e:d7:d7:41:8a:
                    84:38:da:54:fa:65:ca:d6:3e:3a:76:f9:8c:99:16:
                    33:5c:14:c0:a2:3b:c9:01:76:a9:0b:94:69:2c:17:
                    92:fa:e7:7f:f0:49:5c:3e:8e:fe:1a:e8:72:12:d0:
                    18:76:55:83:84:fc:64:9b:47:6d:50:ce:f4:59:27:
                    c6:52:b5:7a:a4:ad:21:9a:c1:08:27:65:68:77:57:
                    d8:a1:be:61:e9:0e:6d:c2:42:fe:70:af:ee:53:0d:
                    6b:11:8d:f7:1f:9a:8f:88:5c:30:46:3f:92:f1:90:
                    ee:4e:fe:7e:16:2c:54:56:04:f2:e1:ec:ce:df:db:
                    a7:f7:99:d8:10:a9:08:9c:4f:44:b1:d6:27:15:3d:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:C8:12:49:01:03:3F:56:D6:05:14:02:7D:C0:53:57:93:D1:7B
            X509v3 Authority Key Identifier:
                keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:43:79:b0:a9:9f:1f:46:d4:ed:17:2e:7d:fa:a9:52:a5:f1:
         e9:e7:34:0c:05:a8:48:47:30:a0:85:b0:c0:4a:ea:c0:10:96:
         6e:3b:9b:60:31:c2:15:1f:2f:15:3d:f3:75:32:de:c9:03:8d:
         63:e4:ea:14:42:81:63:ca:2c:99:ae:a0:b9:62:c2:a7:83:41:
         b3:93:eb:b4:02:a2:8d:b8:69:43:1e:40:f9:f1:08:ae:b0:3c:
         fb:11:eb:94:f2:18:4d:d5:7f:0c:5a:fd:70:76:b9:ed:5d:f7:
         06:0c:47:fd:89:93:ff:f3:47:de:b8:8a:d5:44:23:c8:ab:f7:
         18:72:9b:fd:40:ad:33:bf:d2:a5:2d:e1:98:e7:da:39:df:a4:
         cb:e2:e4:b4:9a:06:3f:eb:e8:4f:99:bd:e0:48:02:e5:2b:a3:
         f3:a8:12:c2:75:b1:01:82:f8:c3:00:5c:42:7e:fd:8c:d0:21:
         3e:d4:b0:0b:7b:2f:2d:be:5c:f7:b6:83:61:74:be:61:81:c3:
         7b:03:bb:a8:de:90:2f:e5:26:a1:d5:8a:42:65:c1:93:2a:a7:
         4f:5e:46:26:1b:bf:c4:73:80:66:f2:ac:38:4f:f7:45:d7:6e:
         18:2c:b2:f1:2d:47:ca:0f:d3:98:f1:83:a1:67:8f:4f:6f:88:
         98:17:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----