Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File:                     p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier:          Hh1ZyqFzFr6Pft5JAMhoXEbEIXBngXcohtB+lLJoZIE=
Subject key identifier:   89:EF:35:18:FF:20:56:76:36:20:90:8D:93:1C:87:36:73:1E:FE:B2
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer:       /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial:       01962FAB19D653DBECB864B32A87CF8726C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
                          2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
                          3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: 0BbG+EoXB4LSCt8IsWMkaNqidJRAuSYROsTdg7GDr2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:d6:53:db:ec:b8:64:b3:2a:87:cf:87:26:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=89ef3518ff2056763620908d931c8736731efeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:52:e6:7a:cc:46:d9:ba:a4:38:50:ea:77:
                    25:2f:28:80:e8:c9:86:a2:e8:12:00:ce:23:35:d6:
                    4f:fe:54:02:78:f7:7a:1b:3d:fe:ea:8b:fe:49:34:
                    ea:4f:44:9b:e7:c2:ca:87:7d:d2:5f:77:fc:06:56:
                    2a:fd:32:43:9d:90:82:03:95:48:4c:37:a6:89:14:
                    9a:92:fa:5c:75:9a:43:5f:ca:3d:92:20:68:71:cf:
                    19:8f:47:22:73:47:7e:fd:41:84:ef:af:4f:42:23:
                    0f:23:d0:25:6d:52:27:2b:c6:5d:a7:4b:b7:bf:a0:
                    26:49:f4:9e:d9:38:cb:9f:63:4c:7e:ff:98:e6:af:
                    26:fc:89:ec:0f:cd:90:07:dc:c3:03:99:b4:8a:8f:
                    53:79:15:66:a1:89:21:80:a1:3f:fc:cf:d6:f5:76:
                    ca:12:ba:c2:b6:94:a6:ff:80:f3:83:0e:04:ce:2c:
                    0d:49:e5:42:f5:c6:17:2f:a9:fd:e9:e4:7e:5e:04:
                    c6:d8:36:ec:5c:4b:a2:9e:64:dc:34:97:fb:8e:8b:
                    6d:cd:5a:d4:a1:e4:b8:8b:ca:03:cd:23:e4:d1:0e:
                    7a:e6:cf:62:25:68:a9:4c:08:09:f1:e0:a6:a3:00:
                    49:74:88:c7:2f:19:fb:65:c8:12:a1:a0:bf:e5:f0:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:35:18:FF:20:56:76:36:20:90:8D:93:1C:87:36:73:1E:FE:B2
            X509v3 Authority Key Identifier:
                keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:57:0a:64:03:9d:fe:9f:7c:1e:e8:07:15:c8:12:cb:09:59:
         4b:e2:d4:fb:11:90:4d:49:f0:59:13:53:99:fe:a9:6b:93:3d:
         a8:06:29:77:6e:69:c6:b6:f4:a7:9a:c4:05:3c:3c:6b:c2:1b:
         61:c0:46:cd:cd:ed:3c:f3:3e:50:80:da:ce:1f:f9:6b:81:9d:
         81:d5:49:9f:4f:21:a3:90:5f:8e:1c:0d:d9:25:f0:b0:3f:c3:
         f2:18:42:28:33:16:86:01:de:4a:2e:7a:c0:df:35:81:3c:4e:
         ff:4e:4e:1f:bd:b0:34:58:8c:33:f9:e4:50:56:cc:cd:ff:a6:
         5f:bc:02:f2:32:18:11:42:a5:18:1e:b3:a6:a0:59:6f:ad:b4:
         a8:1c:ee:c7:6f:33:00:29:f3:8c:39:74:9c:d3:64:dd:51:97:
         d3:28:d0:34:df:d5:8f:00:81:dd:f9:fa:b2:22:5b:df:3e:64:
         f5:6a:06:13:81:b5:d6:df:4d:51:5e:78:9d:a0:e8:65:e0:0d:
         ab:c7:75:d9:34:9c:fa:14:7c:a9:a5:ee:bc:f3:57:fa:f7:f0:
         a0:0f:3c:be:e6:ee:a6:ed:04:35:f3:24:9b:36:93:72:5d:91:
         92:c7:ba:33:f3:90:e1:01:62:b0:7a:65:75:91:50:62:bf:5d:
         bd:e1:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----