Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File:                     pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier:          Vi+P+0a3WDGmYulHvtoQCvb3hOS4vwTNP5zvbXCciLQ=
Subject key identifier:   AA:B0:B0:24:89:31:C9:1E:83:22:F9:EA:6F:FE:C4:B8:21:6C:02:AD
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer:       /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial:       01962E98FBE8E3CFF090A45888344966E575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number:          0B65
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
                          2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: 0aDLp7qut8EzlzXibt0V9S7eBRjyluhprNO8IOZhuWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:e8:e3:cf:f0:90:a4:58:88:34:49:66:e5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=aab0b0248931c91e8322f9ea6ffec4b8216c02ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:6e:ad:f1:d1:38:20:4d:32:f4:22:1f:8c:
                    a5:65:a6:d4:08:5b:8b:8c:31:0d:ba:de:a9:bb:49:
                    24:0c:7f:8d:c7:ae:aa:22:f7:df:f8:9f:83:88:07:
                    4e:5f:9b:2e:6c:aa:81:4b:26:2a:d0:03:f5:f0:5b:
                    e5:eb:a4:a3:31:b9:b9:83:9c:79:47:56:5d:7b:9b:
                    50:12:46:4e:75:c1:10:fb:61:88:1b:ed:7e:80:c5:
                    5a:05:69:98:9b:d6:70:13:b9:6b:36:78:88:40:74:
                    41:66:b5:06:ee:83:6d:c7:01:5d:e0:0c:3f:e4:1f:
                    33:bd:a4:04:b4:94:cf:04:4a:a8:28:f8:85:a7:75:
                    53:c2:20:75:d4:22:a2:3c:cb:11:e7:49:51:c5:92:
                    f9:a2:fd:85:55:9b:dd:ab:fd:a2:b7:41:50:58:b9:
                    7f:47:29:47:e2:94:9f:5f:d5:16:6e:a7:fe:c7:c0:
                    d8:c0:cf:da:73:47:a3:a9:cc:27:81:f6:9d:d1:71:
                    2d:99:0f:b3:2e:14:ce:a3:61:5b:d0:6d:0b:59:07:
                    e5:1a:57:fc:fe:f8:d7:e9:71:0a:0f:cd:28:34:47:
                    a4:2d:ae:20:e1:f8:50:ef:f3:4e:1e:31:91:7f:88:
                    c9:82:af:d3:8f:9f:74:4e:f6:52:75:ed:a5:97:7f:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B0:B0:24:89:31:C9:1E:83:22:F9:EA:6F:FE:C4:B8:21:6C:02:AD
            X509v3 Authority Key Identifier:
                keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:33:de:ae:62:31:62:b5:d5:bf:08:5e:c8:a5:ea:fe:1c:45:
         b2:ad:85:39:6e:7e:af:99:86:5b:b6:a8:c8:00:cd:71:f1:20:
         e0:35:20:d5:36:3e:a9:ca:3c:25:11:74:f4:0e:d3:b5:c8:fe:
         f7:28:43:7b:0d:fd:19:e5:1d:ce:5a:62:36:bd:fe:ff:6b:0f:
         17:c1:ae:e1:94:71:70:5b:79:5d:04:36:22:f7:61:48:51:78:
         2d:a6:67:c0:58:c9:1f:19:a8:96:ba:37:3d:81:e3:92:7b:12:
         bf:76:59:48:3b:30:c0:67:f6:1a:17:5d:d4:bb:b7:9f:83:d9:
         ad:6c:8f:bd:65:b5:8e:53:04:4e:0c:a0:10:c7:c5:40:49:a1:
         66:09:19:a5:39:75:66:90:76:43:42:62:bf:05:f4:01:2f:a8:
         d6:46:25:9e:8e:ba:05:17:ca:5a:12:dd:ee:01:6e:dc:21:50:
         33:4d:9e:5b:44:20:18:02:e4:11:76:44:6f:5e:7d:6d:2e:c3:
         a6:64:3e:6a:67:c0:42:3c:7a:e6:12:00:fc:29:e7:2e:1b:25:
         34:ae:42:29:22:20:86:34:bd:4a:3c:d4:2c:7b:9d:7c:e1:d6:
         9d:5b:9c:06:a9:1a:25:7c:ff:08:1d:f3:90:db:51:fe:bd:a1:
         94:fd:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----