Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File:                     pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier:          UC5UymrvPoN4rXxjca8tFjMAIfMp98K6hRKEN/z3FaY=
Subject key identifier:   AC:EF:03:D7:AC:A5:85:DC:C8:14:A5:34:04:2B:10:1C:93:49:0F:A9
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer:       /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial:       01962E620755F20C0E80A6748F6646978CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: 1-vk3La2yyZFnILeGGhJFe58kLvs.roa (hash: RGkYbhYFu12+UlOAOHZuU+R1lpv4+udmzfRD0bN3gMw=)
                          2: DDotDGxvVqfHzQUKIdqNZjL6I0Q.roa (hash: sMg43UN/gdg+NoR/7BTQI+4KqXRII5o94BppxKuF23U=)
                          3: SlaU9HSyWOLbPlhtr9erox7ST1o.roa (hash: iCddRZIQh0GzddiojJsCNP64OOzV5SHbTR0s3vNWL+A=)
                          4: Vs8JrhOp8doi0Pejo3pFyxkxSF8.roa (hash: v1TXYBsbMNvSJhKVhhxeD9z0NXgTARHKv2tqAe3hsUE=)
                          5: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: xasrLQkqeWxo4LT5Wa2NFlaTWe/FPLqQr7HtftsGNtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:07:55:f2:0c:0e:80:a6:74:8f:66:46:97:8c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=acef03d7aca585dcc814a534042b101c93490fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:74:a9:f7:f2:db:0c:18:78:0d:82:1b:2b:
                    28:54:c1:04:cb:3f:98:f5:b4:d4:a3:c0:61:04:30:
                    b1:0e:65:db:c8:b8:24:4d:07:b2:d6:84:3e:50:8d:
                    cb:5c:fe:f4:19:17:69:da:86:1c:94:da:b4:ca:ac:
                    70:cf:74:96:a2:d4:75:d7:eb:4d:13:95:c2:ef:73:
                    93:c0:25:6e:d1:05:39:c0:48:60:01:2a:7c:71:8e:
                    18:24:bf:d7:44:e3:1d:9d:0d:ba:4c:b6:f0:e7:dc:
                    00:23:fb:9f:a5:6b:85:5e:5f:79:9a:95:7c:36:43:
                    56:aa:08:65:1d:53:b4:55:ab:ad:04:21:4f:2d:2f:
                    77:9e:b5:33:e0:b1:0f:68:7b:da:19:b5:09:de:28:
                    3e:31:9f:b0:53:76:b5:50:89:29:a2:67:59:07:db:
                    f2:86:6d:90:08:d2:a8:bd:8d:94:d9:6b:ec:6c:37:
                    8f:af:c8:ae:3f:79:f1:f2:07:2d:94:03:c9:42:cf:
                    a1:70:7f:f8:38:5d:57:87:bd:de:45:ce:8b:f7:61:
                    bb:17:e5:90:5a:a5:2e:1e:a8:e8:f6:80:3f:9b:17:
                    36:e6:ca:7b:87:5f:26:47:e8:84:98:e6:08:1d:8d:
                    ab:da:f7:6b:fe:69:35:51:03:62:99:8e:a2:a1:17:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:03:D7:AC:A5:85:DC:C8:14:A5:34:04:2B:10:1C:93:49:0F:A9
            X509v3 Authority Key Identifier:
                keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:b8:e5:54:33:cd:01:f3:05:15:f3:a7:eb:aa:09:a7:cd:
         d2:d1:6d:50:18:45:60:a3:02:71:a2:e0:f3:15:4c:71:30:83:
         6c:ae:d7:cf:9d:3b:af:a9:6d:c3:33:b1:33:51:bf:37:32:28:
         12:0f:e0:dd:0f:26:23:f2:5c:56:f5:4e:46:0a:59:4d:c6:f6:
         24:ae:a6:c2:ac:f6:6a:65:c0:95:7e:64:6d:6c:f0:dc:35:82:
         53:9d:a0:dc:ce:6f:fc:b4:a4:b0:07:bf:be:d3:cb:55:56:03:
         11:24:93:af:f3:5d:f5:7f:af:f4:ec:83:ff:87:98:bd:cf:c1:
         2c:2c:c0:88:d7:80:99:d0:3f:52:17:b0:b2:b8:ba:5f:dd:80:
         7a:cf:e0:f6:c6:a5:0e:a4:e2:83:1f:c2:84:0a:01:77:94:c0:
         3e:9c:30:45:61:90:4a:8a:98:43:af:93:d6:ee:07:3a:28:01:
         24:ce:73:4b:c6:3f:4d:f9:d3:fd:b1:df:1b:8e:e4:7f:0d:f7:
         d6:7b:07:64:9f:2c:17:6b:c0:1a:4c:b9:65:13:f1:00:98:1e:
         eb:e7:fd:da:31:0d:38:14:6c:14:16:74:00:b6:e5:f7:84:f2:
         dc:99:90:16:70:65:93:b5:1e:41:e2:1a:b4:94:36:fc:6a:3c:
         46:70:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----