Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File:                     PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier:          PyTKPS8AiU+iJy1PsSJCXzHaxHp8Bf/CO3Qk9kbPC8I=
Subject key identifier:   9A:B4:7A:73:3E:1A:5C:44:84:58:77:76:73:26:A3:0D:0A:E6:58:62
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer:       /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial:       01962E61FB8877D8EBB5EDE5183985174219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number:          047F
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
                          2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: 2+r45KXgoV/sVhlAK0FVDQqdqbLra8aCzRUL1jN9fo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fb:88:77:d8:eb:b5:ed:e5:18:39:85:17:42:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=9ab47a733e1a5c44845877767326a30d0ae65862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:bd:6b:e6:cc:52:90:4b:fa:84:90:26:19:
                    04:78:59:85:10:1b:f7:62:ca:2b:8c:a7:5c:c8:1f:
                    c3:9f:87:c9:21:2e:ff:09:32:d2:5b:2e:df:6e:29:
                    2d:84:1c:55:f4:81:76:33:e0:7d:ed:ee:a4:5a:63:
                    26:1f:f2:21:f3:70:89:e8:bd:a8:1c:1a:76:d4:74:
                    2d:63:a9:e6:74:eb:80:51:2e:66:20:75:db:65:a9:
                    7a:ad:22:87:bb:c4:48:81:11:4d:b4:4c:0d:f2:ee:
                    58:94:7d:ee:0c:be:cd:16:4d:f2:40:76:ab:84:11:
                    85:49:48:ac:a9:c0:ea:42:1b:ea:43:00:2a:c3:2c:
                    b7:7e:de:a3:72:77:72:32:a4:d7:fb:a4:f8:60:84:
                    ec:44:dc:22:f5:f4:6b:b9:67:33:05:dd:8f:45:be:
                    e0:7c:72:8f:ec:11:d3:e2:8e:8b:39:fb:9d:49:a3:
                    a1:36:05:38:a7:44:14:bc:ef:9c:4c:b6:59:da:bb:
                    1b:c1:45:ec:88:ed:89:0f:23:1f:c9:a0:d8:f2:d6:
                    d0:16:5f:a9:a6:bb:d0:e8:f3:2b:80:32:89:9d:7a:
                    cf:cd:10:c0:e2:d3:5e:52:3d:2c:85:98:5a:64:e3:
                    1e:6d:6b:90:56:42:80:36:74:3d:5f:05:42:4e:4a:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B4:7A:73:3E:1A:5C:44:84:58:77:76:73:26:A3:0D:0A:E6:58:62
            X509v3 Authority Key Identifier:
                keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f8:a9:f3:43:5d:3d:44:1f:31:4d:83:8e:41:46:ff:48:85:
         3c:28:87:38:40:47:40:db:82:a0:ba:0d:5d:da:d2:b6:c7:6e:
         5f:60:ca:34:ed:64:17:f8:53:69:59:78:93:64:77:8a:24:0a:
         5c:c9:73:ce:31:cf:ea:e5:7c:11:41:59:e5:3a:ed:15:8d:22:
         f2:8d:4c:2c:86:fa:7b:ea:0e:0c:94:ef:7c:27:4c:1a:53:38:
         c7:9e:d7:29:eb:62:90:b9:52:ee:fd:62:2c:0b:76:02:c0:f2:
         85:55:db:0f:49:d6:6d:ea:49:89:04:94:b9:57:7c:a2:51:41:
         4e:74:57:65:7b:86:72:22:19:cd:b9:d2:77:72:54:b8:fe:ae:
         74:90:9d:dc:1d:26:4d:4c:11:69:51:9c:84:7c:69:4a:90:60:
         58:40:96:4c:35:4b:57:c3:e5:5e:51:e0:aa:4d:c8:30:26:b8:
         2b:cd:75:ea:9f:11:09:6f:aa:69:0c:3a:e1:da:ac:38:d2:57:
         c7:f8:1e:d9:2d:2f:96:b3:8a:4b:78:da:45:08:d4:22:e1:a6:
         ab:a2:32:71:72:a5:2c:ef:fd:16:e9:5c:56:99:49:ec:cd:9f:
         b4:21:0a:d9:17:ff:45:bb:a5:ed:25:9f:66:20:f2:e6:41:2b:
         df:26:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----