Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File:                     pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier:          kTVieKz+j1iVzMcG89h5KEM5KxlUX9chAQFLx1psj2I=
Subject key identifier:   F4:30:D6:9F:4F:1D:55:B8:B3:6D:26:1D:6F:F9:84:34:23:C5:DC:B6
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer:       /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial:       01962F3DD664BB1B9CE4E2463E284F464E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number:          0143
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: GUEsJjKY6AHeC5UMs8SGoG2SJrAhxBi28fJSc1cEeGU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d6:64:bb:1b:9c:e4:e2:46:3e:28:4f:46:4e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=f430d69f4f1d55b8b36d261d6ff9843423c5dcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:15:93:55:e5:24:f0:84:a9:39:6e:fe:a3:
                    0a:3c:a1:02:f9:db:68:0b:94:66:78:5f:ac:ad:54:
                    14:11:62:06:e2:43:19:34:f7:45:7a:25:bc:af:f3:
                    a4:91:ac:79:6a:7b:76:a7:6e:75:ac:24:51:a9:fd:
                    76:19:0f:02:63:d5:47:9a:01:1f:c4:66:4a:05:0c:
                    ee:ca:a3:fa:59:46:80:45:f7:b0:2d:da:34:52:e0:
                    01:d4:10:99:6a:9e:0a:6f:ea:2a:02:ac:26:92:97:
                    38:71:43:e4:e4:53:45:93:3d:c4:d3:61:f4:4e:f2:
                    ac:cd:55:ae:fc:33:01:c1:0e:1d:10:25:8d:07:a0:
                    ed:4c:4d:df:bf:8f:fc:36:7f:7b:5c:fe:b5:a9:91:
                    b3:6e:b7:83:c9:c0:e0:e4:c8:b4:f7:7f:93:2a:64:
                    e5:b8:36:02:cb:be:70:c5:89:03:9c:3e:69:0c:05:
                    02:5d:27:f3:0a:27:e0:76:b5:0b:8a:50:8a:97:f2:
                    bf:25:c1:2b:09:85:d4:a7:c3:eb:ee:e1:e7:9c:1a:
                    1e:02:af:d7:83:88:92:33:75:e9:d8:71:45:24:87:
                    26:a1:14:88:d4:78:a6:c8:d3:4d:f8:a1:e7:7a:36:
                    db:1e:bb:4a:0a:7c:25:ed:30:7b:fc:40:85:51:5a:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:30:D6:9F:4F:1D:55:B8:B3:6D:26:1D:6F:F9:84:34:23:C5:DC:B6
            X509v3 Authority Key Identifier:
                keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:13:8a:91:11:f6:3e:7c:e0:71:51:e1:d0:1c:c0:6e:b2:0c:
         e8:60:63:56:1d:9c:03:f2:f9:d2:94:fb:98:8b:ba:25:31:ed:
         3d:d5:ec:2e:ec:4f:29:7e:77:52:04:60:39:32:12:f4:83:3f:
         6e:44:1f:d6:d8:9d:0e:02:35:65:bd:fc:6d:78:14:32:62:38:
         8c:a4:39:ac:bc:c3:d5:86:dd:04:1f:6d:4b:cd:d4:bc:64:99:
         3b:6c:59:35:4b:b7:b6:6d:6c:2c:7f:36:93:71:13:d6:58:4e:
         fd:d7:75:58:e0:12:12:a5:d8:90:15:c1:b3:6c:f2:a1:07:40:
         59:60:c9:6a:d5:b9:7c:1b:2a:b4:c3:26:36:ec:88:27:69:13:
         03:60:1c:bb:8e:1d:a7:c5:4d:c6:58:2d:09:7e:0b:08:7f:aa:
         01:db:33:37:4e:e0:8c:db:b0:a7:a8:9b:af:30:da:63:46:c8:
         5f:43:42:9e:fe:8f:c8:3d:42:08:4f:b9:2b:84:60:df:c8:6e:
         92:01:1c:03:c3:5c:6f:36:04:52:a1:15:74:1b:ba:4e:99:6f:
         bc:95:65:be:18:f2:d0:87:bf:22:e8:01:04:08:e8:3f:a1:29:
         bd:dc:5a:c3:02:4e:06:57:0f:74:2d:2d:f4:b5:f1:2b:c7:ad:
         02:bf:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----