Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File:                     pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier:          Pxc/bBxmyKhBtNcL6DJmSOy/0hVdDKyvNKCW5eWuXG8=
Subject key identifier:   6B:78:77:D0:40:B7:2F:67:97:77:88:CA:63:12:98:13:9E:DA:66:3B
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer:       /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial:       01962E991895E1B07927BE3815E063CDCC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number:          07C4
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: ye8IAdlOrlLncdQjc3pHJF+MgGwdm+atMM75DJ0d8+A=)
                          2: rWk5sIUEQt5GM5tD9jvlVGxlmoc.roa (hash: bdSHmybqlxfqe2LDlmT/vhR2hatifsBsFgj+STLVUXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:95:e1:b0:79:27:be:38:15:e0:63:cd:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=6b7877d040b72f67977788ca631298139eda663b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:04:be:17:e0:49:65:f2:16:31:10:9d:31:
                    7d:80:a3:fb:48:f7:b2:d4:df:10:b6:0d:48:01:bc:
                    19:c3:2b:95:02:59:af:5a:d3:80:ab:98:81:22:90:
                    bf:5d:84:fa:29:4f:0a:29:25:65:c4:3f:15:0b:40:
                    22:95:85:b0:fe:2f:f0:59:d8:f4:d1:f5:d7:49:37:
                    39:19:91:c1:26:84:f6:88:02:b9:46:95:d0:46:36:
                    4a:dc:6c:08:b7:56:15:29:d6:27:c0:9e:6e:ee:a8:
                    81:fa:fe:0e:80:cc:bc:7a:be:76:e0:a7:71:9c:a5:
                    2c:1c:0e:9c:0c:bf:2b:2a:c1:fa:03:d9:92:0e:e0:
                    c9:d5:21:42:37:ac:8d:57:e4:0f:1d:fe:be:f6:41:
                    96:d2:62:4a:d3:92:26:ed:eb:1e:c1:fb:71:e3:47:
                    19:2c:ec:a1:32:4d:26:09:c2:7e:b5:17:96:cb:6e:
                    51:d0:68:4a:dd:70:c5:7b:5b:24:63:44:42:2a:3f:
                    be:e8:ac:79:e5:17:db:2a:2d:b8:99:7d:5d:2e:84:
                    43:5c:73:8e:5d:72:98:3d:c8:08:ad:71:90:d7:d2:
                    a6:c9:b6:12:2c:d8:04:da:53:97:7e:e2:2c:cc:23:
                    25:e3:71:53:a8:93:42:bd:7b:20:43:48:ca:04:4a:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:77:D0:40:B7:2F:67:97:77:88:CA:63:12:98:13:9E:DA:66:3B
            X509v3 Authority Key Identifier:
                keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:b8:fe:e5:0f:eb:56:54:50:3a:96:bc:6d:74:32:0d:f1:
         cb:14:bc:cb:3d:1f:ce:23:3f:2a:66:4e:ef:0f:97:e9:27:33:
         34:ec:5b:7b:ae:52:f1:07:2a:36:97:40:f3:7f:2f:db:69:fa:
         3e:37:1f:d7:eb:d7:10:18:8f:1f:12:9b:8b:10:7e:52:e2:fd:
         39:c5:8e:4a:49:f9:4c:8c:4e:80:fb:ad:b6:d5:ad:26:1d:8b:
         74:ba:0c:b6:39:35:bb:dc:05:b9:ba:79:29:61:68:ae:cf:4d:
         2d:73:c9:4e:b3:e0:61:a3:50:9d:c3:24:e3:76:3f:05:85:44:
         90:80:5e:a5:00:71:ce:6c:af:1c:eb:91:90:4a:5e:3b:3e:f2:
         6a:b1:02:96:0f:02:cb:7a:db:c7:d4:35:a2:3b:63:2c:1d:00:
         3a:2b:70:95:f0:33:ee:ee:56:f2:1c:dc:de:88:16:2f:e5:5d:
         5d:b6:c6:36:14:d2:fd:57:46:33:25:d4:41:64:98:26:0c:1a:
         35:b5:dc:3e:d7:09:0e:a9:72:e6:10:20:4e:3c:e5:f5:d9:6e:
         8b:5c:d2:53:1a:da:f5:25:83:7a:87:48:5b:49:21:ef:9f:df:
         73:e4:7e:cf:35:42:3f:6f:59:18:c0:08:34:c9:3b:a2:75:f4:
         27:22:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----