Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File:                     pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier:          nwFzOksF1f8vwrG3Ly/Z3va3QcHAOj0MNXuG7aFxIc4=
Subject key identifier:   72:00:C6:B9:0E:77:D3:6A:41:AE:05:69:C2:62:72:44:D1:5F:8E:0C
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer:       /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial:       01962F07477C37C4DB1A248602E220BBEDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number:          0DFF
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
                          2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: dKffsuJfIDMeQZ2QKFMQa3DGxO/S7XFeBrKyncDPH0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:47:7c:37:c4:db:1a:24:86:02:e2:20:bb:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=7200c6b90e77d36a41ae0569c2627244d15f8e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:86:8b:83:51:bd:e7:8b:ca:4b:2d:ce:02:4a:
                    de:7e:d9:5e:18:c0:7c:84:69:f0:93:fa:0e:36:1c:
                    1f:1e:e4:43:1b:e6:ea:ea:4a:23:d7:38:93:c2:6c:
                    f8:f6:a2:b2:82:88:cc:3c:ae:38:f0:79:7c:04:fb:
                    47:99:4e:52:bb:a1:84:2f:28:15:36:05:04:81:e8:
                    92:d9:7a:6b:59:2b:3b:be:00:26:54:fb:71:14:e1:
                    46:64:a9:78:b1:51:c6:0e:66:64:ea:2b:60:a6:28:
                    bf:b8:ed:86:35:bc:82:66:33:50:c2:6f:06:65:02:
                    5d:05:d2:b3:3c:1d:b0:86:9b:fa:d5:92:12:34:67:
                    1d:c3:6d:6c:92:b5:aa:0f:77:5b:3d:4b:ab:f7:7d:
                    5c:fd:8d:69:2c:45:66:c1:0b:8d:ef:0f:67:60:f7:
                    0d:5f:54:71:bf:d9:e9:bd:50:5a:d7:ff:de:9d:5f:
                    94:33:b8:04:39:07:a9:bc:6a:8d:db:e6:73:ea:12:
                    ab:3e:6e:20:0b:3e:bc:96:65:f1:b5:60:4b:2f:90:
                    f7:f7:62:a1:dd:e1:76:6b:2e:47:8f:76:89:97:c5:
                    05:16:b4:f1:32:b3:1a:f4:41:0d:06:b3:32:5e:69:
                    09:58:e9:75:25:a4:d0:72:1d:16:a9:79:0b:50:23:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:C6:B9:0E:77:D3:6A:41:AE:05:69:C2:62:72:44:D1:5F:8E:0C
            X509v3 Authority Key Identifier:
                keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:13:d8:92:ef:35:7f:fe:54:7a:bb:93:dc:f3:e2:76:8d:
         39:d1:ff:98:28:0f:29:b5:04:dd:f1:ab:8a:d7:30:4a:9b:16:
         c2:4b:fe:29:e1:35:69:f7:74:9a:d5:53:a7:92:c8:43:e6:46:
         85:ce:10:56:7f:95:70:7e:f6:11:6c:1f:8a:b7:8c:f6:c2:03:
         aa:9b:e1:d2:45:35:d2:59:b7:f6:a3:b8:da:5c:01:4c:32:b0:
         e4:5b:f1:84:df:49:7b:73:82:09:e7:83:9b:a0:6d:11:e3:b9:
         2a:72:7d:79:ed:2c:7f:46:1c:82:2f:79:dd:8e:1b:40:e9:55:
         dc:e2:45:0b:18:0b:35:09:9d:c4:1f:5d:b7:2e:58:d9:a5:88:
         ff:cd:b2:e8:a2:00:f8:e7:16:66:29:0b:11:b5:7e:1c:fb:3f:
         d0:f1:ba:c9:39:c3:65:68:19:0f:8d:ad:87:5a:57:a8:f5:8d:
         47:60:ef:d6:7f:df:0e:2f:49:00:a8:15:7a:c3:02:af:cd:18:
         2a:c8:96:d8:76:af:03:b1:5e:83:1c:d7:5f:1b:fc:24:f5:c9:
         bd:88:c0:98:bd:bc:98:47:3c:32:df:26:97:52:db:bd:af:fe:
         0b:a0:09:d8:9c:ba:1a:41:3d:d5:d4:ed:10:db:1d:d8:9e:1e:
         a3:bd:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----