Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File:                     PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier:          5udu8pm2cerROgmo8s5uo7gKOSwFqkfLal0XIWSoauk=
Subject key identifier:   15:0A:A2:64:BB:CB:C0:9B:F5:7D:C0:50:E5:6A:69:05:A2:06:14:05
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer:       /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial:       01962F06BB214BF6F78A3A20B32BDB97843A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
                          2: HtYH7IfWThQC0FjsfIOLJnPcCb0.roa (hash: JQOoHMUiGQozF5WEbUjnDZo1IaMc3weZxMTmvWza6pA=)
                          3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: oBgsDGPEZPva+hHHmtuSZ+C4KbTODFVQRRlFMPNY2Ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bb:21:4b:f6:f7:8a:3a:20:b3:2b:db:97:84:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=150aa264bbcbc09bf57dc050e56a6905a2061405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:55:80:35:f7:2a:e0:e5:ae:01:3d:64:d2:00:
                    ac:64:c1:9a:78:09:1d:56:6a:72:82:af:90:61:df:
                    2c:0b:e6:a2:6f:0f:f4:ab:a0:64:f4:c2:12:26:10:
                    63:57:1f:37:85:0f:61:48:b9:3a:3e:d9:4c:8b:b9:
                    eb:45:ab:a7:4a:e1:c1:5e:49:42:e7:23:ad:10:4b:
                    7a:64:36:26:3e:97:b7:ed:5b:da:90:ce:cc:8c:6b:
                    4a:2f:f6:1b:be:f0:c4:7b:49:2c:02:46:dd:5f:8a:
                    11:8c:4a:d4:06:81:ae:5c:d4:60:e7:6e:5b:fa:45:
                    46:3a:a6:76:f6:64:75:72:cd:df:55:27:ad:46:de:
                    74:1a:7c:6a:ca:b3:8e:5f:48:8d:8b:6f:c0:e2:48:
                    f6:37:60:35:b0:54:dd:12:5d:69:ba:7a:35:d0:ab:
                    d1:80:7d:a7:2e:a6:c6:27:5e:ed:2c:3c:b7:d4:8a:
                    31:bd:96:bb:b5:49:43:98:d1:fa:ce:97:51:fe:ab:
                    5a:0e:93:57:27:6b:f7:f5:40:98:91:7c:6b:19:4f:
                    6b:45:1d:0f:b2:f5:fa:87:b2:9e:e7:6e:cf:e5:f8:
                    4b:82:3d:27:ec:56:bd:4e:9a:0b:7f:25:67:71:19:
                    aa:fb:76:cb:10:f3:de:d6:2d:e4:0c:aa:82:57:d3:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:A2:64:BB:CB:C0:9B:F5:7D:C0:50:E5:6A:69:05:A2:06:14:05
            X509v3 Authority Key Identifier:
                keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:c8:8b:27:21:5d:46:f7:06:12:62:6e:53:8b:2f:29:65:
         3c:6b:e4:53:5a:b4:24:17:34:54:09:fd:85:f3:75:94:96:89:
         64:5d:b0:f1:09:70:10:c4:6c:94:96:a0:4c:ce:62:cc:ef:df:
         77:71:e0:21:9e:a7:c8:ee:55:6b:7d:c7:ee:98:25:0d:1b:b9:
         fd:57:eb:e0:50:8a:ea:26:19:55:41:54:25:61:3d:42:1a:fc:
         02:49:69:4b:5b:a2:a0:a8:3a:5c:3f:54:1a:65:94:7f:20:b7:
         c5:0b:80:34:1b:a9:a1:23:1b:b8:c8:46:d5:45:3f:f7:a3:a5:
         45:5a:25:3c:82:16:49:90:ee:89:aa:7c:a2:d4:b9:ed:e8:a1:
         bb:2a:7c:92:bb:19:cc:8d:8f:fb:fe:6c:7c:7d:90:a1:a3:a4:
         34:17:be:d5:08:2a:2b:43:9e:07:b3:dc:99:1a:10:e4:e4:94:
         58:9b:af:f0:01:bd:17:a1:2e:2a:9e:88:2e:80:7b:e4:5e:79:
         59:9e:71:7f:4f:a3:74:35:19:c1:be:8c:3f:39:c4:83:76:fa:
         21:6e:49:1b:e3:41:dd:03:aa:f9:b6:86:64:2f:1e:52:1c:38:
         9f:af:c3:65:98:95:e2:7b:2a:53:9c:5d:b2:b4:4b:20:8c:6d:
         85:1d:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----