Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File:                     ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier:          KqNrO7S/bRws6JEUMIlrMuZieXszsMEXbNrKYMFzjaE=
Subject key identifier:   D4:09:16:A6:46:BC:86:87:AA:EB:7D:7F:2E:89:9D:D7:6F:A8:54:EB
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer:       /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial:       01962E98C53BE458CF530467B90051EBFA64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number:          04DD
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=)
                          2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: 4tOQZqQMGk+5u6aqB+/eTTrIhlsCVzE5KIybxiiX+ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:3b:e4:58:cf:53:04:67:b9:00:51:eb:fa:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=d40916a646bc8687aaeb7d7f2e899dd76fa854eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:f1:00:96:ff:c9:f3:4b:c4:9b:44:5d:59:
                    2d:a0:46:5b:91:47:2e:1c:b9:a1:70:ef:4b:6c:8b:
                    94:58:bb:2e:6d:b0:09:57:0c:7b:57:50:d4:ef:1c:
                    41:a8:1e:ea:24:ab:9c:e4:6c:17:dd:e0:7e:04:51:
                    6f:1d:50:c6:31:2d:39:e2:b7:4d:bc:56:5e:9d:f9:
                    4f:65:95:cd:50:0a:0b:54:cf:f5:3e:a2:6d:1e:1d:
                    7c:59:c0:d1:bd:e4:af:a5:ca:02:80:af:70:99:b8:
                    be:3a:44:e3:11:7f:7c:72:2d:44:28:75:3a:d9:1a:
                    9a:02:44:52:22:ac:c8:a9:9f:b2:f5:32:5c:f4:2b:
                    be:f9:22:da:35:ea:f5:40:35:4d:df:54:a7:1c:84:
                    47:95:57:4a:f4:d6:eb:03:a8:a7:44:6b:97:87:6b:
                    28:7f:f1:ca:ad:4a:52:28:7d:d0:12:49:ea:cf:e5:
                    62:0e:2c:e8:7c:f6:2a:58:7d:3f:a7:71:7e:e5:c0:
                    de:80:cf:b3:95:ba:57:5a:3e:65:20:3f:17:ec:08:
                    cd:9f:af:3e:6f:e3:ed:91:57:e0:1c:c2:75:86:72:
                    a9:87:94:12:d2:3a:03:bf:39:fc:16:80:a7:4e:71:
                    77:1d:6d:fa:ec:c0:8e:cd:d3:c2:95:b7:00:d9:13:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:09:16:A6:46:BC:86:87:AA:EB:7D:7F:2E:89:9D:D7:6F:A8:54:EB
            X509v3 Authority Key Identifier:
                keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:00:80:66:36:36:ad:6d:e5:9e:b5:3a:71:61:a8:4e:61:
         44:d1:d1:78:5f:a3:e0:ce:7c:ba:5f:f8:eb:d3:30:a3:68:51:
         5c:59:53:a9:e3:38:68:18:04:69:32:4e:b4:58:94:ab:26:d9:
         ad:38:fa:a8:f9:49:5f:0b:74:ee:46:fc:ac:46:a2:fe:cc:00:
         5c:56:79:e9:cd:c2:35:28:11:74:5c:c0:7a:6c:2b:e6:36:21:
         42:9d:77:b5:1c:f7:37:0f:31:2c:82:45:25:15:44:3b:c9:d3:
         61:74:4a:b2:71:e9:db:a9:30:8e:0d:c5:94:8d:ed:71:5d:54:
         53:1c:2e:12:2a:52:fa:9d:04:88:34:c9:9f:4e:47:7d:b7:cf:
         0f:80:3e:3f:f2:67:4c:d6:8f:65:67:9a:44:f6:c0:b7:75:34:
         96:65:71:97:81:52:f6:67:93:1b:1f:bf:f1:98:87:b1:a1:2a:
         56:fb:0a:7d:d6:61:fc:27:3b:14:d1:11:7f:7d:5c:0b:f5:55:
         3b:d3:ec:0b:b3:2c:e0:b5:2f:96:bf:6d:8e:eb:45:ac:e3:89:
         47:9d:cb:69:df:f0:14:f7:4f:c0:7f:c2:08:ab:9a:31:be:f4:
         ff:79:69:65:35:83:5a:47:6b:19:d2:72:02:73:6a:1d:fa:44:
         c1:a2:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----