Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File:                     pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier:          oav33+mfRIrWn+1WGWszQsCWdd0Js1b9fi5DIBgwtdU=
Subject key identifier:   D9:C6:C0:B8:32:23:6F:EE:37:EF:64:3B:07:59:AE:70:92:40:90:5E
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer:       /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial:       01962E2B345C664C1937E7B13B0D643B12F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
                          2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: /cwkSibqZ93O3Biid+tbObTj18n4m4sYbo2ibTQF4WE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:34:5c:66:4c:19:37:e7:b1:3b:0d:64:3b:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=d9c6c0b832236fee37ef643b0759ae709240905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:b3:ef:18:a1:6d:6e:f1:67:2e:6c:a1:73:
                    b7:55:08:95:bc:67:71:cc:cf:45:0a:46:7f:31:5a:
                    4a:89:8b:ec:85:bf:ed:8f:f8:3e:9b:a8:70:a8:22:
                    05:2a:f7:29:45:f5:4c:e3:22:5c:a3:bb:0f:39:98:
                    01:e4:ef:4d:4a:c4:e5:2b:99:95:29:f7:b3:08:3f:
                    8e:16:70:a8:aa:b1:5e:31:8d:f9:58:06:db:a8:dc:
                    23:9e:a6:95:57:7e:d5:4d:26:8c:fc:b0:7f:18:a8:
                    56:ab:89:39:26:62:aa:fe:b1:1a:ef:cf:aa:c9:24:
                    5a:88:32:a9:e3:44:ed:5f:55:34:16:0f:ca:56:ec:
                    63:37:9e:6d:74:48:25:c8:c9:44:90:b1:46:c8:35:
                    5a:4e:34:67:f8:9d:de:1b:b8:4d:e3:34:6b:04:9a:
                    ae:2c:6f:8f:bf:a3:9c:58:98:e2:83:c5:bf:20:06:
                    ff:7f:41:2f:af:f3:c5:fe:07:d9:dc:8c:7b:12:3d:
                    ef:69:aa:4f:3a:da:37:2a:0f:ab:a9:05:94:52:de:
                    d4:11:5d:b7:9c:23:a5:fd:90:2e:d5:f0:90:62:f8:
                    79:b6:2a:99:0b:c8:56:dc:f7:db:c9:12:4c:cf:0f:
                    06:9f:24:a2:58:81:be:b8:26:9c:21:65:5a:5f:3f:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C6:C0:B8:32:23:6F:EE:37:EF:64:3B:07:59:AE:70:92:40:90:5E
            X509v3 Authority Key Identifier:
                keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:92:25:ae:b0:a8:17:b7:e6:94:69:bc:12:1a:4b:85:fd:ea:
         fd:38:d3:98:11:7e:1c:4a:f8:c3:bf:19:d9:51:85:9f:96:18:
         5e:34:96:ab:5b:21:1c:b1:a3:0a:dc:c4:58:3b:01:36:39:cc:
         03:98:3a:86:e1:44:bd:2f:10:1d:9a:da:2d:4c:af:6a:03:7a:
         05:2d:13:3d:76:62:b4:6c:10:3f:f1:d7:f2:c8:ee:43:71:21:
         da:78:2f:b2:3e:4a:e6:06:12:bf:e4:4d:5e:20:18:bb:22:89:
         8f:3c:07:c8:68:c5:54:ad:e4:26:5b:3b:08:36:f6:c8:a9:15:
         be:87:47:aa:6c:29:4f:e3:37:b4:65:ff:bb:f1:74:09:38:be:
         86:ab:fd:dd:e7:fd:35:31:49:91:de:b5:1a:8a:f0:b1:52:bd:
         92:d8:2f:40:de:20:b1:ce:61:3c:e6:1c:f2:fa:9e:e7:af:33:
         a0:c4:4a:cb:de:09:38:71:4c:0f:52:c0:72:e2:50:5a:ba:79:
         89:e8:90:26:62:fb:65:6d:86:2c:69:b6:02:10:67:be:5e:70:
         7d:e2:5e:4a:ed:d2:a7:6e:e6:b7:22:21:9f:e2:58:8e:2a:78:
         c8:12:2d:8a:d9:81:83:b6:39:5d:7f:79:53:26:23:9f:f8:7b:
         5f:e2:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----