Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File:                     pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier:          HMMSjaOFSWtyqC+4ctrwkfB4/C/f647AEyX52xU6Bzo=
Subject key identifier:   1B:F6:59:07:A8:E7:E9:97:10:3D:6B:CD:06:92:16:1E:1A:29:63:0E
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer:       /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial:       01962E9942D365B084B2BBD1860DFC8AEDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number:          08DD
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: M4kd2W9JVjezQo0JnU2bITbnTrIwh8v6yQE4RlD/U+g=)
                          2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:42:d3:65:b0:84:b2:bb:d1:86:0d:fc:8a:ed:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=1bf65907a8e7e997103d6bcd0692161e1a29630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:10:96:0b:9b:cc:1d:f8:36:d0:a1:7f:bc:26:
                    ce:53:18:23:9c:68:7e:4e:99:43:3e:02:fb:2a:1e:
                    84:a6:c9:6b:1b:56:a9:09:8b:ac:f4:b2:fc:8b:ee:
                    f6:ba:47:4a:7c:e4:02:c4:b2:d7:3d:dd:5c:57:5d:
                    05:76:56:28:b6:fe:72:04:5d:11:fd:6a:38:33:b5:
                    0c:9f:67:28:86:95:88:18:61:4a:12:1f:04:1f:9d:
                    36:ed:91:94:9d:52:f2:36:1e:2c:79:f9:02:4f:d9:
                    b6:88:52:ba:80:c3:3c:2f:d4:c8:18:a1:31:29:0d:
                    aa:69:50:c1:b7:d0:9a:27:46:76:96:91:1e:5a:59:
                    c0:80:42:49:58:1c:9d:00:42:73:47:f9:22:fe:13:
                    ba:6a:40:b5:2a:c4:40:a5:6a:42:f5:2f:ba:ce:5b:
                    4c:3a:d0:fb:66:60:f1:56:83:cf:37:c1:15:8e:7c:
                    c1:6d:e0:5e:05:9c:1b:02:70:89:7d:97:70:b6:3d:
                    6f:3a:c1:0a:d1:11:5d:6f:c4:bd:e2:2a:34:96:ce:
                    53:a1:12:dc:58:90:e2:0c:2f:66:89:30:0b:65:34:
                    69:c6:51:a8:0c:6b:8f:e9:71:c8:51:f8:61:02:9f:
                    59:b2:4f:44:65:9d:18:3b:94:53:49:ed:7b:4a:9b:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F6:59:07:A8:E7:E9:97:10:3D:6B:CD:06:92:16:1E:1A:29:63:0E
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:36:3f:ec:07:ce:03:3f:69:10:d0:41:2e:ab:0a:5d:01:
         01:92:2d:cc:eb:86:11:35:29:44:2c:2a:ff:66:31:e9:77:a3:
         11:19:15:50:bb:9d:d2:fd:4d:59:41:49:17:19:ea:84:ab:fb:
         13:0f:39:f4:23:b2:d6:ef:9c:78:91:a6:3e:b8:86:dd:e3:b0:
         41:52:a9:74:7a:97:02:4a:17:bd:3f:7e:84:e4:80:01:9d:d6:
         9b:6d:d4:71:43:c0:ba:29:b6:a4:3e:ad:04:77:82:8d:3e:10:
         ef:b9:7a:0b:72:25:d2:5b:90:8c:54:4d:eb:40:ef:2f:ca:e5:
         89:86:3b:e9:14:87:0b:dc:f3:33:3e:59:1b:65:83:72:d9:1c:
         59:ad:d4:be:cb:e0:c9:51:48:01:b0:6c:01:60:ac:88:2f:c4:
         cf:2c:15:bb:60:61:97:38:3b:ff:40:a4:de:61:32:b5:2a:be:
         61:34:67:da:77:cb:dd:06:63:04:e9:f5:ad:43:69:18:6e:96:
         c2:d2:ae:85:a1:84:e8:af:31:59:e2:de:f7:c4:05:3c:77:e7:
         c9:92:13:bb:ad:1f:00:f1:06:07:76:62:2e:8d:27:58:81:f4:
         49:0a:3a:e6:53:00:3d:88:13:f0:02:ff:ab:fb:1b:a6:29:e8:
         8c:ed:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----