Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File:                     p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier:          Gkwp/Vxf5R/P0/wGqHlSSXN5/ZuTJWUCNf4FBLKesa4=
Subject key identifier:   31:55:4D:C1:09:4C:50:69:FC:DE:07:20:5F:DC:AE:5A:95:1C:40:B8
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer:       /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial:       01962FAB78F5A7057A40F187CD89E9450A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
                          2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: x3KFEiAzCWJMnHkigScXyiY/66jqO2bFlJnuO0t/SdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:f5:a7:05:7a:40:f1:87:cd:89:e9:45:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=31554dc1094c5069fcde07205fdcae5a951c40b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:77:15:8e:1f:ba:ea:83:6b:30:84:6b:3e:
                    90:d5:30:f1:c4:da:d3:1d:a1:94:22:f8:dd:8c:70:
                    a9:cd:ed:85:f4:72:be:fe:a6:24:9f:6c:33:0a:09:
                    87:6a:e0:db:4e:d1:95:87:de:e6:cb:4f:86:9c:1c:
                    da:65:22:39:f8:4c:46:6b:03:3f:61:6f:60:36:ac:
                    f0:dc:b1:b4:ad:4e:b4:b4:88:8d:57:41:2e:46:e0:
                    45:5e:33:66:55:5d:3c:5a:d1:f4:a4:d5:65:02:aa:
                    40:6e:99:92:33:52:07:0a:76:0c:d9:d4:48:2d:29:
                    d1:0e:29:e3:3d:93:8f:44:8e:d5:c4:fd:be:aa:6b:
                    de:95:1a:b1:8b:71:3d:18:ae:0f:3b:e9:89:c8:c4:
                    2f:ee:b6:fc:94:e5:57:9c:54:e4:09:5a:98:12:a1:
                    c6:88:11:45:4a:d7:c9:63:87:d3:68:4d:f0:33:a0:
                    5a:80:be:f3:79:78:f8:88:d5:18:83:9a:81:38:f2:
                    f8:3c:cb:1e:e7:57:4e:c5:ec:a3:98:bf:fa:d1:90:
                    04:83:c7:80:79:8c:bd:ef:09:c7:10:3d:25:b9:8e:
                    64:84:20:27:7b:e8:0e:3e:9c:a7:b3:56:18:c9:25:
                    8f:fe:c5:30:d9:55:11:bd:e6:56:59:0c:64:39:28:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:4D:C1:09:4C:50:69:FC:DE:07:20:5F:DC:AE:5A:95:1C:40:B8
            X509v3 Authority Key Identifier:
                keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:01:5e:e0:99:54:f2:16:2f:f5:f6:0e:ea:c6:37:86:e6:6f:
         6f:09:80:48:10:ad:cb:06:da:15:e9:05:f1:b3:73:ae:f4:99:
         09:93:28:59:66:dd:74:66:f4:8e:4d:a7:1e:b1:1f:7e:d1:3d:
         64:f3:d1:8c:d3:07:62:5a:1f:11:3a:b1:d0:a8:0e:cb:b7:03:
         d0:ec:5f:c1:d0:96:59:10:b5:f2:1b:ba:59:67:ec:16:ce:b8:
         4f:b6:6a:98:74:00:a5:c9:a3:d3:c0:61:a3:4d:ac:76:14:db:
         9f:c0:fa:ab:e3:eb:a6:04:4c:ef:8e:9f:8e:23:22:b7:ce:bb:
         c5:8c:21:6d:7b:88:bf:ca:66:70:2c:56:24:52:3e:5c:28:60:
         f2:e0:1c:be:5c:37:01:d0:66:41:e5:cc:96:2d:c1:5c:5b:ab:
         63:09:31:a5:02:1d:13:be:89:f5:0e:32:83:ca:26:c4:1e:8f:
         82:be:e9:8a:32:4f:80:b6:ac:b4:f9:ac:2c:5e:41:85:5b:82:
         99:d7:53:fb:50:22:2f:51:70:c5:b7:f4:8a:62:c7:9a:46:6e:
         56:18:4a:5b:4a:31:f7:85:39:c2:d5:50:66:bf:a4:d0:96:9f:
         9f:be:97:0c:ae:09:e7:7d:19:ed:e8:bf:0c:83:b8:d0:60:7a:
         64:00:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----