Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File:                     PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier:          p1DAdDYsPcs1YJk9ZY5H2GWVnQGLk4TKyN0NrA67FEM=
Subject key identifier:   13:DA:08:42:7E:1D:BC:AA:08:39:DE:71:68:E6:39:26:01:8C:42:99
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer:       /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial:       01962E999DC49FDCFBB06A360DEFB5759190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number:          0DD9
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
                          2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: VdDe3h2m5pEUUhXc0wbXtMReqNbkSufoH7djbEdx8Cs=)
                          3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9d:c4:9f:dc:fb:b0:6a:36:0d:ef:b5:75:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=13da08427e1dbcaa0839de7168e63926018c4299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:a2:a8:14:a3:00:f6:5d:1f:65:56:fe:fe:
                    d7:89:27:ff:18:ca:a5:f2:94:f6:d6:b8:62:86:81:
                    43:a3:18:57:2d:3e:1d:07:90:5e:1f:26:63:0e:08:
                    8c:d2:a8:d3:f9:c3:95:80:07:bc:ac:d1:e5:8f:b6:
                    7d:d1:1a:82:86:0f:d7:04:0f:b6:58:19:d3:5d:64:
                    8d:4d:bd:30:d4:42:38:74:27:61:b6:9f:72:c8:bc:
                    30:e5:ca:77:93:14:de:19:23:5e:dd:a7:dd:30:88:
                    b2:6f:21:06:fe:66:12:47:83:84:0d:d1:0a:54:34:
                    8a:44:f9:c4:e5:6a:34:22:99:f2:ee:52:7c:94:38:
                    77:3e:1d:fa:5e:39:60:bf:97:26:d8:86:b3:d2:84:
                    c6:89:22:84:ae:a7:91:f4:7c:3c:37:3b:e8:c1:3e:
                    c5:a7:82:4b:0c:cc:c8:ff:e8:bc:0a:27:00:65:37:
                    6d:ff:2d:fc:6e:d5:9a:e3:73:22:bb:9c:ed:23:3f:
                    0f:0f:64:8d:47:40:d9:f6:db:6d:1b:81:b8:e5:b7:
                    67:98:5a:cf:c8:4a:24:ca:a6:c2:00:7a:af:02:4c:
                    44:80:20:c5:ec:aa:90:d0:d8:ed:5b:b5:52:ac:4b:
                    e8:cf:a7:df:90:d7:0a:17:03:19:6a:20:33:59:6d:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DA:08:42:7E:1D:BC:AA:08:39:DE:71:68:E6:39:26:01:8C:42:99
            X509v3 Authority Key Identifier:
                keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:fe:52:b7:2a:c9:e0:68:7f:9b:1d:b8:d8:36:4f:cd:8b:
         8b:c7:e2:24:b6:dc:4c:68:77:bd:6a:62:90:c0:9f:57:ed:47:
         c8:71:25:37:fc:7c:90:f4:1c:bd:dc:fd:7d:d6:56:ac:c5:40:
         f1:0c:97:8a:df:de:95:f4:6d:af:30:b6:57:e3:76:bd:bf:5d:
         7c:0a:4e:55:9e:db:c2:b5:a1:31:f6:ba:4f:eb:c5:47:6b:8a:
         f3:ec:bf:d0:76:a0:d9:3a:10:26:3b:24:04:4e:36:1e:c1:f9:
         92:c0:58:b5:c6:6f:ae:87:c7:54:e7:76:e1:66:ef:5d:c8:1d:
         38:04:ec:a6:14:13:99:22:ea:49:05:66:7a:ae:e8:0e:aa:7f:
         64:7b:57:15:a0:0e:e3:cf:7a:c0:13:2e:12:5e:dd:14:6c:32:
         6d:d0:92:ec:8e:03:fa:bc:10:c0:a2:8a:ae:12:f9:fb:92:63:
         a3:a3:aa:84:ec:2a:58:e6:46:e0:61:26:10:a5:20:82:f0:68:
         31:0c:28:7c:21:7f:f7:8e:a5:3a:09:64:3f:83:48:08:18:ce:
         50:73:b7:62:1c:41:a1:fd:34:f4:8e:a6:6c:6c:45:95:cc:45:
         c8:78:65:0b:10:fc:6c:3c:44:23:0d:0a:9b:af:a9:35:20:55:
         42:24:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----