Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File:                     p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier:          TB2bzhW9tHIfMqDwx+o9Z7OR7TTTGPbpAgnW57MwJRg=
Subject key identifier:   12:69:C6:AF:6B:25:57:EC:42:7C:1D:9A:35:90:11:CF:2B:3D:D0:C8
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer:       /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial:       01962E98860910EE13501E1E9455AB401EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: ASn2Vag0whXCpOGfyINm9bjLiH5qSQuHJGD1EpTgM9E=)
                          2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:86:09:10:ee:13:50:1e:1e:94:55:ab:40:1e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=1269c6af6b2557ec427c1d9a359011cf2b3dd0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:47:02:fa:b8:98:f9:fd:5d:2e:0f:f0:b6:
                    66:00:bb:99:77:1b:a7:21:2b:6c:6c:dd:eb:5a:b4:
                    91:a0:b7:c9:ce:5d:d8:59:fb:89:20:2b:07:0f:49:
                    5d:e0:8d:2e:6f:ca:51:0b:8f:f1:6f:9a:ce:49:7f:
                    4f:20:6d:e8:36:38:03:02:1f:86:b3:08:5a:d3:d7:
                    43:17:01:9a:0f:2c:00:c3:19:41:5e:46:cb:41:00:
                    ef:7f:92:6e:22:a0:18:a0:0f:00:82:9e:57:c3:9f:
                    cf:40:44:5f:b8:67:fc:ed:bd:d8:dc:13:50:54:f1:
                    82:ff:2e:9e:cf:a6:ce:41:5c:d0:9d:95:04:48:83:
                    5c:37:6f:91:c6:7d:63:c8:a7:0f:7b:e4:25:27:67:
                    72:d3:86:a4:a8:6e:a9:df:88:e8:bf:3b:cd:8b:00:
                    bb:6a:be:9b:4a:23:6b:1a:f5:82:15:26:0f:fd:45:
                    5a:f2:4e:ee:d1:f1:c0:42:39:e3:d9:5e:74:8a:88:
                    ea:bc:39:a7:53:4a:19:7e:8b:7f:e3:2e:50:5f:d5:
                    60:c8:ae:55:31:c1:72:43:b2:36:d4:dd:84:1e:3d:
                    c5:ce:6b:55:3d:7a:d2:67:a5:5e:21:8c:5a:64:d5:
                    09:59:14:0a:6f:b4:12:01:df:da:d2:6f:da:86:8d:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:69:C6:AF:6B:25:57:EC:42:7C:1D:9A:35:90:11:CF:2B:3D:D0:C8
            X509v3 Authority Key Identifier:
                keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:1d:6c:ea:e1:a3:43:da:44:00:09:b2:17:58:7e:15:ac:
         ca:d7:8f:19:df:f3:c4:8b:ec:31:d9:cc:93:d3:93:8d:8f:47:
         72:e9:e9:34:10:78:8b:5c:41:ca:7e:79:97:0d:f9:72:e3:18:
         fc:4f:5a:76:51:37:5d:54:b0:b8:d3:18:8b:4a:79:c8:b1:d9:
         3f:b5:da:92:6e:5e:cb:c2:69:11:d9:e8:db:9b:04:00:27:ce:
         2d:82:c7:62:9c:6b:c5:5a:18:b1:02:9c:c9:56:d4:b2:b8:78:
         5b:bf:d3:c9:d1:23:55:c0:b6:fa:a8:cb:e5:b3:ef:a9:69:bf:
         89:3d:db:74:e1:4d:4c:f1:48:96:60:2d:f7:46:2e:d5:70:7f:
         fe:ba:37:66:11:7f:ae:5a:c5:61:33:b1:e3:1f:d8:5a:06:90:
         95:4e:c5:f8:e2:4d:bc:8c:48:76:06:ae:74:8f:f8:34:99:7e:
         e4:50:ce:8a:89:8f:09:bd:42:39:de:af:2f:8a:9e:31:4b:be:
         2e:fe:8c:6a:5c:a1:56:ff:5b:52:f6:4a:c2:e4:26:5d:be:db:
         2b:8c:a7:4f:bc:14:ad:2f:b4:2e:2e:76:b2:bc:26:92:96:8b:
         38:a7:44:8d:b2:38:6d:c1:ee:c2:a1:6c:2c:ff:0e:82:0d:83:
         b7:5e:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----