Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File:                     Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier:          4/4m3LT5GKzM+Orp8U0p2ZdcMra7tA0E4fdkY1o9u0c=
Subject key identifier:   28:0E:98:70:99:33:BF:33:50:A6:A9:97:9D:87:DF:41:95:D5:5C:25
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       01962E61A058EABB964CD4546ABEF4905F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number:          0A01
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: pgN1sD9OdWV3LsafJ6ldWkueeagsFlTQmTEihgTYoR4=)
                          2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a0:58:ea:bb:96:4c:d4:54:6a:be:f4:90:5f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=280e98709933bf3350a6a9979d87df4195d55c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:f6:a6:1f:af:57:0c:a2:63:1b:2a:5f:d8:
                    e8:a5:99:12:32:cc:b1:57:4e:90:e0:a3:fd:21:c8:
                    47:2f:b2:66:ba:d7:ab:82:62:28:20:bb:9c:78:25:
                    70:50:53:c6:54:66:81:36:9f:6e:4f:2e:b7:bf:82:
                    0e:41:28:09:d5:26:b7:e3:2d:e6:1c:37:8e:fb:2f:
                    e4:90:a3:30:07:2a:a2:8d:0d:f3:56:80:fb:bf:86:
                    ce:73:46:45:d4:04:22:51:20:a9:97:ea:9f:d1:71:
                    f0:fc:c1:50:e0:18:20:8c:8e:61:3e:d0:5c:c5:f5:
                    d4:89:2a:4c:0c:76:93:a2:5a:d7:06:a6:1e:b0:c3:
                    e6:9c:dd:6c:22:51:36:f3:cf:fb:c7:96:d5:52:b4:
                    98:4a:73:81:cd:ee:c4:c4:33:26:98:97:61:67:9e:
                    08:37:5c:f8:bb:4d:8e:86:5d:58:5c:0c:2b:0b:bc:
                    9e:83:c5:cc:1e:87:d7:26:db:6c:31:99:f9:cc:01:
                    e7:63:1a:ec:66:e8:ff:2a:06:f9:15:3b:7a:01:43:
                    0f:0e:71:72:c1:84:76:6f:77:d3:9d:86:47:5b:b8:
                    d1:5a:73:7d:ab:a8:b4:08:9a:47:53:22:23:09:1b:
                    1e:0b:37:67:2f:e1:42:27:29:dc:63:52:78:72:5f:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0E:98:70:99:33:BF:33:50:A6:A9:97:9D:87:DF:41:95:D5:5C:25
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f6:70:08:ef:fd:c0:ca:cb:b2:89:66:90:c3:92:af:d7:32:
         f1:cf:c5:57:b8:21:1f:15:e0:de:97:9a:1c:75:6e:90:aa:ec:
         ca:94:66:af:b9:bc:37:05:f4:46:56:95:f6:ec:35:39:17:44:
         13:f9:22:74:e6:c0:5f:a2:c5:4a:96:f4:7b:0a:a0:f8:56:16:
         d9:08:75:df:27:73:eb:cf:30:48:8e:1a:92:a1:f1:92:bf:29:
         e8:35:cd:50:45:c1:78:b8:c8:ff:4f:85:d2:a3:d4:ac:b8:e8:
         c7:2c:2c:a6:ab:f0:fc:2b:28:14:19:24:7c:8f:fc:c2:42:0a:
         18:d4:b2:33:bf:ca:e7:fc:ce:8a:14:a0:a5:a7:f7:6c:cb:f7:
         56:5b:fc:72:58:08:e0:06:72:9b:88:5c:e1:b0:98:ef:c7:0c:
         9d:8a:bf:a5:ad:af:fe:db:0e:6a:05:c0:94:86:d4:4f:cc:23:
         55:4f:80:21:c1:52:ad:38:c6:c3:da:81:4a:8f:d7:94:f8:f0:
         fe:14:6d:2b:46:0b:6f:07:99:7c:bf:d8:0e:08:b9:8a:e9:f3:
         62:92:20:e1:67:61:2e:3c:7c:12:9e:99:a1:2d:b6:e8:bb:33:
         ae:3f:1c:10:73:d9:1f:d5:65:da:73:9a:5c:13:56:4a:dd:7a:
         c6:47:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----