Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          p7EtVCCKJUmfWNoa/+gOVJ6PkkG1TyCr3VNVRZ1aVM0=
Subject key identifier:   94:2D:42:78:4B:C4:2E:D3:D7:BB:48:9A:54:BD:8C:E7:4D:AC:F1:84
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       01962F7421D1D42DCD3477DBE43E3B7B5254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0CB5
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: PQ3dRQU4tA3jLEZr4vAKlqj623paPomhbK7UyDbg9Cw=)
                          2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:21:d1:d4:2d:cd:34:77:db:e4:3e:3b:7b:52:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=942d42784bc42ed3d7bb489a54bd8ce74dacf184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:e7:21:a2:8d:93:97:ad:c9:13:91:93:34:
                    93:76:26:94:d3:e7:ad:05:c4:2c:b5:01:a7:4f:5b:
                    98:e7:c0:24:4a:d0:36:e8:04:37:b5:ae:5d:06:45:
                    49:19:89:68:61:7f:dd:db:be:1a:fd:16:df:6e:42:
                    69:df:22:74:90:c3:77:5c:04:2d:ba:74:08:17:11:
                    54:d2:71:10:cf:5c:54:82:9e:aa:2f:98:59:11:f8:
                    4d:b8:44:04:f4:60:f1:a1:21:2a:b3:17:7b:cf:ec:
                    c3:4c:ef:28:48:b4:fa:1c:0d:2e:79:08:3d:9b:60:
                    d9:e3:df:e6:d5:bd:29:35:fd:92:af:5b:2f:32:dd:
                    25:97:09:b1:0a:80:af:86:37:11:98:dd:b6:b8:43:
                    ba:7b:21:2e:24:d0:21:4f:e9:11:2e:46:41:33:b1:
                    60:d2:cc:6f:ff:2a:4f:b5:7a:43:97:f1:06:fe:bd:
                    a3:9c:84:5e:96:85:6f:b5:3b:00:e8:7c:88:7d:fe:
                    d9:7e:22:9d:15:88:20:0d:b3:62:dd:ca:0c:3c:c1:
                    82:df:63:2c:f6:d4:af:48:0a:1f:f5:68:ef:dc:ff:
                    61:ca:8b:ad:b5:11:c9:66:06:08:13:90:73:8e:03:
                    4e:6a:b8:f9:ff:13:8c:65:c3:66:34:08:25:d8:03:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:42:78:4B:C4:2E:D3:D7:BB:48:9A:54:BD:8C:E7:4D:AC:F1:84
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:25:57:b7:86:30:dc:95:4e:33:3e:01:b2:5e:c4:45:48:
         b7:95:11:42:f2:c8:ce:7d:18:7c:06:1c:e6:2e:7a:df:31:83:
         35:5c:0e:83:49:ae:b9:ca:5b:0e:ae:6c:e0:48:21:f8:1f:70:
         d5:e2:f6:8f:23:c6:36:4c:f7:ce:94:eb:77:aa:c8:e7:8f:42:
         97:b1:24:2d:65:b1:db:9c:ca:70:c7:b1:73:ea:55:27:22:62:
         92:6c:df:52:70:55:47:3b:14:d1:8b:43:0e:94:16:dd:cf:e8:
         75:64:a4:ed:15:87:62:13:33:d4:68:a0:38:4c:bb:d4:b4:5c:
         67:a5:c2:8b:c2:15:7c:ba:82:8d:4a:05:57:69:f1:aa:b6:72:
         61:e1:4f:c9:6f:28:2d:f9:95:a4:da:50:6e:94:26:fe:76:26:
         81:0b:97:09:fb:a5:e9:79:6e:54:f8:2c:82:0e:94:7d:7b:f1:
         f7:09:b0:cc:cd:5e:93:a6:d1:f3:90:06:c8:b2:a7:a9:a1:8a:
         f2:4c:74:87:4e:ba:7c:9a:54:7a:de:8d:b1:b4:73:ef:b9:8c:
         8c:fb:9c:7b:5a:82:86:bc:67:c2:8c:18:2d:95:e9:8d:2f:81:
         9a:af:de:fa:86:1a:e4:04:f3:e4:72:16:f7:81:0b:c5:03:0f:
         cd:04:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----