Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File:                     pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier:          wCOJURzJi9oez+7vjSvCTV0Qek15IvXgZdI2pQ+MtoI=
Subject key identifier:   09:B4:8B:34:C7:A9:18:D4:C7:9B:E3:C0:14:7F:BB:3D:6D:91:D0:F4
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer:       /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial:       01962F744CE5380BCA3497974B45A33E388C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number:          0D49
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=)
                          2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: 4IOp8WOJtr7vZXQm31eMrmA2CxeWYCcrmef9iGoGoYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:e5:38:0b:ca:34:97:97:4b:45:a3:3e:38:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=09b48b34c7a918d4c79be3c0147fbb3d6d91d0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:92:e0:5c:19:8a:7f:1a:c3:92:c6:0b:58:
                    e4:02:b1:79:94:59:51:22:85:41:06:53:5e:41:26:
                    c6:ce:32:66:f2:d1:95:17:73:31:15:6b:85:e9:c2:
                    27:27:54:5b:b1:96:df:ae:ac:63:29:f1:37:6c:6e:
                    8c:e2:32:3b:df:18:c4:b6:02:80:06:fe:57:de:9a:
                    95:a2:3b:26:b9:e9:bf:5f:37:63:c7:b9:f2:fc:2b:
                    61:72:05:16:80:0e:a6:0b:b6:eb:a9:bf:b2:a9:88:
                    b5:e7:34:4b:9c:0f:84:79:3f:09:0d:5c:15:96:59:
                    b5:3c:f4:86:07:10:9a:6d:3c:fd:10:8d:7e:73:c5:
                    9d:6e:bd:eb:54:f8:55:3b:39:7f:ac:74:5c:6c:75:
                    26:b1:4e:9a:9e:de:fd:0a:dc:81:38:e4:6b:ed:ed:
                    2d:30:a0:4b:3b:17:8c:ad:97:5c:74:3c:bf:ae:8d:
                    2e:2d:51:95:93:a9:12:9f:39:49:c0:64:9a:36:cd:
                    64:fc:cf:bf:de:c0:6b:6a:38:83:61:ae:5a:e6:ef:
                    d1:26:47:7c:fb:14:e3:89:07:8f:f3:c2:ae:90:b9:
                    a7:f8:c9:98:72:3f:3a:57:be:5d:c7:0c:61:9b:dd:
                    13:7a:a6:93:1c:c8:18:85:e5:12:ca:d3:f9:9f:a2:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B4:8B:34:C7:A9:18:D4:C7:9B:E3:C0:14:7F:BB:3D:6D:91:D0:F4
            X509v3 Authority Key Identifier:
                keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:82:3a:11:24:a9:8c:58:74:7c:7d:5a:a5:f0:a5:87:fa:
         ba:a3:ad:d6:04:b0:7e:c0:cf:b1:cf:39:de:4e:c8:ba:26:03:
         24:4e:82:85:39:9f:13:b8:2f:87:dc:fe:f9:d2:aa:46:25:65:
         24:d0:da:d3:68:cc:49:77:07:89:3b:3a:3a:e1:df:5c:03:7b:
         68:7b:21:3d:dd:0b:09:25:3e:a1:b6:98:ad:58:f8:85:0e:36:
         90:e7:f3:b7:f4:ae:e6:4f:de:01:fe:8f:15:10:7e:fe:0d:2a:
         9f:17:83:26:3c:48:14:97:2e:80:48:41:78:85:65:cb:70:d6:
         2c:88:72:3c:0a:bf:4f:8a:f9:0b:a2:19:36:13:cd:ce:8c:92:
         32:3a:58:85:18:d9:bd:b4:93:97:f4:15:7d:c5:0a:80:1b:ad:
         30:d1:3f:d7:0b:f7:90:c1:81:14:61:98:f9:66:4e:17:8c:39:
         0f:e8:70:91:0a:5a:ed:10:fb:40:77:c4:83:ba:1d:0a:06:c4:
         59:0e:85:c1:db:98:b8:c8:36:51:28:9d:e4:cc:82:86:a9:29:
         38:c1:0c:c3:62:20:34:8f:66:f7:e5:e5:64:27:38:dd:70:4b:
         80:e0:25:c7:03:f3:78:b4:42:93:1d:2f:19:9a:c7:b4:47:69:
         c0:09:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----