Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File:                     pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier:          0LX3S1tbazb27RZCQfssRUZQXeJgRR+W1PAh7fEBhVI=
Subject key identifier:   C0:7A:F7:B0:4C:1A:9C:EF:06:C9:75:B1:E2:06:19:0A:C0:38:6A:67
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer:       /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial:       01962F74957875F2F000A6104637E55D1D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number:          118C
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
                          2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: madsI1+mzjMdfsfbYDh/fM/GYostinJNR1r7xNy2MQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:78:75:f2:f0:00:a6:10:46:37:e5:5d:1d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=c07af7b04c1a9cef06c975b1e206190ac0386a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:d1:d2:c5:0d:88:fb:3d:2f:eb:b6:55:d7:
                    05:32:f6:fc:97:75:6c:d6:ff:5a:53:6d:37:f5:5f:
                    e0:c7:0e:ac:a2:9a:d7:d4:29:51:77:fc:59:39:3d:
                    f0:9c:dd:9e:91:60:5f:e8:94:4f:42:96:e1:09:0c:
                    20:da:7c:dd:29:3b:b3:39:75:f6:ca:7d:06:52:58:
                    ce:c9:9d:98:7e:b1:0e:b5:84:03:dd:88:6a:af:15:
                    71:14:19:36:19:11:eb:b4:d8:8a:70:12:63:81:9e:
                    a5:34:d7:69:6a:b9:f5:1d:dd:90:2f:f7:c8:0e:ab:
                    b2:35:63:2c:ec:be:3c:ec:c1:cd:0b:d6:0e:d6:67:
                    a4:79:92:1a:08:3b:63:b0:f2:5e:aa:98:17:4d:4f:
                    db:cd:43:9d:b7:0b:df:94:df:8b:7a:4e:60:4c:5c:
                    bd:8c:01:53:3b:48:3b:07:f8:0f:aa:d1:ab:c8:2a:
                    87:6d:7b:03:3d:ae:4b:88:bc:c4:22:c8:f5:d0:81:
                    52:27:38:7a:da:8e:bc:4f:0a:3f:19:20:13:af:0c:
                    f1:6f:2e:d4:1e:c3:cf:87:e6:16:36:ba:6b:9d:06:
                    06:64:a7:60:22:ca:1b:ee:ea:83:33:6a:e6:ae:60:
                    a5:31:39:60:2d:66:6a:09:ca:45:83:0e:94:a5:ea:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:F7:B0:4C:1A:9C:EF:06:C9:75:B1:E2:06:19:0A:C0:38:6A:67
            X509v3 Authority Key Identifier:
                keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:c5:61:51:40:8b:be:8f:ff:8a:f6:5f:79:ba:c6:c9:85:
         91:b0:a1:76:8f:f0:08:1c:39:b8:51:b1:85:de:64:b5:20:ec:
         f3:93:9a:53:5a:02:d5:18:9b:e9:9c:62:24:6e:cd:59:6a:0a:
         95:9a:96:61:76:68:77:d4:76:55:c2:a9:79:35:ca:6d:00:c5:
         20:c8:0e:ba:b9:d3:a4:e5:2d:1b:ed:dc:e5:dc:9f:f2:07:bd:
         37:0f:df:0b:56:d5:32:45:cb:59:82:1a:f9:a0:8b:4a:bc:b3:
         c0:1a:30:91:20:c2:44:a1:cf:c4:30:22:19:80:9d:ae:6a:6e:
         f0:ad:b0:a5:38:12:3c:03:f7:3d:cb:05:0b:b5:e8:0a:6e:ba:
         f9:95:6c:ef:88:2d:95:ae:0f:18:c3:fb:20:05:3a:67:29:00:
         0d:a3:7a:d4:2f:0f:b5:7e:b7:c8:1d:fe:7b:d6:f7:13:3d:96:
         40:0c:c3:e1:78:03:ea:8d:83:17:9b:33:ec:92:3d:01:d5:30:
         96:fe:c5:2d:92:23:20:5b:40:3a:ec:b6:e6:8d:7e:a2:11:e0:
         66:ac:b7:9b:5d:34:c2:d4:c2:87:35:6f:62:34:39:5d:da:b3:
         dd:e8:10:02:f1:8c:e9:62:1f:ad:0a:3b:3a:23:0c:06:61:64:
         ff:8f:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----