Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
File:                     PidqxRoTJAHbTNdB2GalRiKg0Vw.mft (raw, json)
Hash identifier:          jhfkrLbErO860lHbFPxIcZAekGiXRtJLBz+pFGRVyv8=
Subject key identifier:   DA:E5:AD:05:19:E6:B0:15:BA:EB:F0:D8:10:94:6C:2B:6C:53:B0:02
Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Certificate issuer:       /CN=3e276ac51a132401db4cd741d866a54622a0d15c
Certificate serial:       01962F3D9312E23A2B3C5A1524DC9ED71732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
Manifest number:          120D
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: PidqxRoTJAHbTNdB2GalRiKg0Vw.crl (hash: jsonBjWyw6FJpVzAjuiFapTL+g2y4HERaSbpYIKFebg=)
                          2: mmsyAnMHt_dbYyNaAmRzOf1ER00.roa (hash: Z0B0gLnq6WYbQAuekKr8EymO3fzsvhfiIyL1pWQiz74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:93:12:e2:3a:2b:3c:5a:15:24:dc:9e:d7:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=dae5ad0519e6b015baebf0d810946c2b6c53b002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:40:ac:0c:88:85:c5:1a:08:07:e7:0b:32:
                    d5:a4:e7:c3:7f:85:f2:cb:ff:6f:2c:f4:08:f2:6d:
                    a0:10:7b:11:76:ed:42:98:3f:9c:d6:21:a3:d8:0c:
                    f9:d4:ad:47:33:19:a2:a0:e0:26:cc:ec:49:56:8b:
                    6b:d0:60:db:1c:6c:f4:8e:35:71:fb:37:6d:d1:c2:
                    27:31:4a:fa:b8:5f:8f:b1:2c:2f:7e:d5:31:53:9d:
                    d8:e2:f5:1c:19:e2:9b:e0:32:6a:d0:6c:b0:78:a9:
                    bf:05:66:41:70:da:25:74:ac:34:ba:71:66:e1:c0:
                    f9:e9:de:fa:62:61:72:69:a2:69:34:f2:52:79:ca:
                    d9:bf:dd:42:f9:2b:f5:c7:9d:23:3f:2f:ff:32:35:
                    58:1f:74:08:7a:3d:bc:b8:fe:ea:6e:ed:d4:af:b6:
                    22:59:f6:d6:11:4f:3e:74:86:45:09:b7:ef:78:ef:
                    bd:26:d6:bd:a2:ee:55:28:0a:96:47:5e:16:0c:9d:
                    48:b1:91:a3:af:c8:53:e4:e0:cd:12:1f:3c:dc:5b:
                    cd:d3:19:45:60:dc:9b:67:c9:78:78:34:92:1d:a5:
                    1d:b3:74:e1:6c:7c:d1:40:45:cc:cd:64:f1:39:8f:
                    c1:39:3e:6c:c4:af:63:58:c9:b0:ad:03:66:f6:ae:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E5:AD:05:19:E6:B0:15:BA:EB:F0:D8:10:94:6C:2B:6C:53:B0:02
            X509v3 Authority Key Identifier:
                keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:1d:b0:26:14:4f:18:49:28:34:fe:cc:b6:de:9e:b3:1c:
         bd:37:dc:f4:fd:47:67:41:3e:94:09:87:96:79:9a:31:18:bb:
         0d:fb:47:eb:d8:ec:8b:d4:41:87:0f:98:ea:f8:a0:d0:54:f1:
         46:b0:03:ff:c0:5d:00:c7:f0:a8:55:91:f3:2b:6d:79:48:89:
         3b:0f:d4:cb:65:79:fe:6a:91:48:47:ef:ac:83:8d:bd:6f:aa:
         a7:81:51:23:66:d3:75:6e:08:df:e3:e0:be:e8:32:45:f2:fc:
         7f:12:15:2b:c8:60:a5:cd:c8:31:f7:00:6f:c1:2c:72:fe:bf:
         71:07:d7:73:77:f2:31:48:5b:19:0b:78:34:f7:fd:06:35:b4:
         35:68:9d:79:57:62:c3:06:07:4b:36:ab:6b:e7:f8:7e:27:3c:
         e0:ee:49:32:46:fc:3d:1c:c6:91:e1:28:48:c5:a7:38:0b:d4:
         8b:7b:d4:6b:cb:1a:51:88:24:d7:71:e9:e4:cc:ea:f6:7c:1e:
         64:d1:c2:c4:7b:f0:5d:52:03:03:44:ed:9d:09:44:46:17:d6:
         10:f2:ba:01:dc:64:be:ab:ca:52:9a:65:f2:ed:43:74:fc:b7:
         1c:6d:f3:e4:04:c3:35:36:5c:ae:ee:93:b1:05:11:eb:eb:aa:
         da:63:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----