Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File:                     pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier:          sP8yZe9P68iZQt+/04VS6UGpeStPH2OpI2ihPK8HU/g=
Subject key identifier:   85:67:27:DD:28:13:18:4D:29:9D:B1:9B:BA:2F:C5:75:6B:DE:D0:05
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer:       /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial:       01962FAB1DBA29B4B06A859663C0ACE17DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
                          2: XX7w2vPpzXRFuwUhQden5lCVCZQ.roa (hash: qufImvpEF3c9wVcCzVpZb6bGNeux1RbSpnlxjWKOWAA=)
                          3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 6jJ/4vZASps1vPO1/o0L3solMUhWimubJyoJZuYKf0I=)
                          4: wR0fHEzjCHCPZPB5JGzxge-3qdE.roa (hash: Ll5NNx6rg9HE4x/GGGYOGCvVW3eD8cnr/rDcbdSk/qU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1d:ba:29:b4:b0:6a:85:96:63:c0:ac:e1:7d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=856727dd2813184d299db19bba2fc5756bded005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:b8:95:3c:76:19:de:be:f3:c2:22:8a:50:
                    88:2c:cb:5b:47:10:a9:98:c4:85:a4:8d:2c:fb:df:
                    f5:ff:5d:5e:df:fa:a5:9d:fc:32:a7:3b:b3:eb:0e:
                    30:4f:2f:62:02:94:f0:a4:0f:5e:3a:c9:32:df:f4:
                    c1:b5:1b:eb:46:55:0a:e4:45:e6:2d:8d:a7:7a:de:
                    db:c7:86:33:c8:65:72:67:6e:95:45:cc:91:5c:2b:
                    cd:b3:5a:cd:55:11:fb:de:49:27:48:bc:bf:14:7b:
                    6e:8f:7f:73:c5:11:7c:71:55:8d:0d:ab:56:87:27:
                    2b:35:f5:a7:7c:e4:70:9a:da:ad:15:95:70:e3:cc:
                    52:7c:7c:30:0a:67:6b:10:ea:e0:74:07:c5:d5:34:
                    05:03:c9:79:84:e0:83:77:06:b2:20:8d:93:c4:c1:
                    7e:99:1a:37:b4:6d:1e:be:fb:60:69:ab:f4:c9:71:
                    52:da:b5:4d:77:f7:06:63:25:40:72:56:22:35:1c:
                    f3:c7:d9:97:54:2f:97:0a:ee:bc:b2:b0:8a:57:31:
                    e8:fb:7e:20:7b:3d:66:e6:62:52:54:e3:3d:b1:b6:
                    3f:45:70:91:b1:bf:0c:b7:a5:f5:47:0e:5c:36:8b:
                    5b:9c:27:ea:bd:6f:ae:4b:0d:e0:f9:92:ac:bb:b9:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:67:27:DD:28:13:18:4D:29:9D:B1:9B:BA:2F:C5:75:6B:DE:D0:05
            X509v3 Authority Key Identifier:
                keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:97:66:cc:ab:23:f5:fd:8c:94:3c:fd:9f:57:4d:3a:fd:ad:
         ca:e7:20:82:9f:f4:9c:9d:bb:c5:49:3c:46:ff:14:e3:68:21:
         20:96:1d:16:95:8c:b0:ec:6d:6e:45:27:63:38:d0:cd:95:0d:
         24:83:8c:fb:78:e7:12:4d:ef:ad:a2:09:78:48:4e:8a:a7:4c:
         22:eb:91:18:17:12:f2:37:0b:6e:b1:42:d1:09:99:bf:06:b8:
         3e:0a:91:d8:71:20:96:51:bf:87:38:95:d6:b1:ff:e1:f6:a7:
         26:f8:c6:05:b1:a7:7a:ce:ac:09:7e:f7:a6:aa:d7:ad:aa:65:
         b2:06:10:bf:71:3d:ae:4b:99:1b:75:6f:4f:75:d9:53:7c:74:
         18:ca:af:95:c2:1f:72:8d:3f:3b:80:13:af:3b:96:d6:5d:63:
         e9:04:56:ba:90:6c:d6:0f:6a:a5:f1:29:be:04:50:08:32:04:
         92:14:f0:58:dd:4d:06:01:ff:15:05:4c:72:83:55:ec:04:34:
         7c:12:a0:9d:ae:76:e3:66:d3:77:be:37:5e:94:5b:10:dd:d7:
         c2:57:7c:4f:7b:1e:83:76:66:97:2d:3c:32:4b:86:2d:8d:13:
         d3:ec:1c:b8:28:6b:38:e0:43:d7:99:69:84:63:c8:24:da:47:
         bb:6f:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----