Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File:                     pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier:          e5U8OcnV+eWgnJJIvg3EgG+8Hdl7dwPgQ25XWtuveVM=
Subject key identifier:   5F:2E:AA:6D:76:F1:67:17:5C:9B:E2:4B:2F:0D:A1:FD:0A:BA:EF:8F
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer:       /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial:       01962ECFA0EB472AD187F72FACEC35BBB8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number:          0F75
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
                          2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: hM6+BPf66Xi+wO4yPwNU40JiMtawY0IgD66px1q5CLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a0:eb:47:2a:d1:87:f7:2f:ac:ec:35:bb:b8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=5f2eaa6d76f167175c9be24b2f0da1fd0abaef8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:49:b6:05:c6:ab:bf:8b:fb:d3:7e:25:b7:
                    10:f8:cb:1e:dc:2e:a2:b0:ca:2f:66:24:49:1e:94:
                    11:9b:cb:8f:28:3b:b7:e3:f0:cd:ce:a4:cc:4a:ec:
                    67:c4:e7:fb:ad:83:8a:38:b0:33:2a:16:e1:bb:b7:
                    6f:23:f8:b3:49:01:c4:63:7b:7d:51:b3:35:ea:50:
                    25:41:c1:c6:ec:59:31:40:6f:85:5e:fd:4d:a1:24:
                    c8:aa:c9:a0:e3:4c:86:f9:e9:1a:31:36:7d:e5:da:
                    8b:c8:b3:ba:cd:44:de:ce:cd:57:04:3b:4c:d1:46:
                    8e:96:2e:b7:ca:0d:c3:e5:1f:d5:8a:e2:e8:55:a6:
                    b0:e9:4d:d7:24:23:17:f3:b0:d5:9e:f6:ed:f5:14:
                    ac:d7:f9:d4:20:bf:ee:da:81:e3:d6:5b:6b:5d:e2:
                    39:19:08:4e:a9:c7:17:23:99:b1:0c:c5:32:d1:54:
                    50:bf:9b:20:cf:48:94:0d:b6:34:47:fc:20:dc:44:
                    9c:10:a2:72:c1:f0:e6:59:f7:9e:85:af:cb:21:98:
                    1c:ed:6b:15:6f:51:cc:13:5a:a4:72:2c:95:ff:dd:
                    43:35:26:54:ec:e7:bd:f5:d5:1b:b4:99:69:17:1e:
                    c1:c7:61:a4:f2:2f:5b:ef:ac:b1:0b:b8:2d:05:35:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:AA:6D:76:F1:67:17:5C:9B:E2:4B:2F:0D:A1:FD:0A:BA:EF:8F
            X509v3 Authority Key Identifier:
                keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8e:58:f1:29:bf:6a:97:6e:80:0c:0d:24:57:54:59:71:83:
         d3:52:06:71:44:db:44:f6:15:7e:a1:0b:df:65:5c:d5:a9:38:
         af:5f:99:46:d8:e3:ca:1d:44:43:4f:08:43:f1:76:9e:2d:da:
         e0:80:91:90:f9:91:a0:13:56:2f:12:a0:2b:0b:f0:3c:34:2c:
         24:78:f1:63:ee:49:08:8b:81:58:9c:21:7b:40:d9:44:f9:c1:
         49:35:ac:fb:4c:f5:76:32:b9:0e:7c:9a:d1:a5:96:69:c3:6b:
         17:0c:0c:92:0f:44:a2:78:a9:23:15:53:88:fa:47:6a:aa:a2:
         6a:99:60:5d:b9:42:5e:2a:40:80:d6:3b:c1:ff:14:cb:84:1f:
         8b:ca:43:16:03:31:63:d8:86:f0:a6:41:22:82:f4:83:fa:ce:
         29:5a:f7:34:e2:5d:f8:aa:6e:10:e4:94:dc:ee:96:71:11:35:
         78:57:aa:1b:e9:d4:8b:b1:b2:b7:fd:c2:c9:c9:fa:a3:9b:cb:
         59:49:5e:16:94:bd:46:fa:6b:65:b1:85:01:56:62:d5:c3:6c:
         a6:71:e1:a6:5b:f8:e3:5f:f5:90:05:7d:c3:24:64:cd:97:2d:
         19:16:8a:8c:3a:68:ce:b9:d8:b1:53:7b:16:36:ea:53:d0:10:
         cf:9e:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----