Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          1VQXm27qX8JXoyfb6/BX8tzGc9C3IDUpVeB42smgfB4=
Subject key identifier:   A8:00:0C:3C:AD:0A:45:37:36:54:EC:3E:0C:FB:6B:E2:BB:D9:1C:97
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       01962F0651AB7E10911185AF4AC390C30E3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          05AD
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
                          2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
                          3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
                          4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: tQkMKhPALUcuK+ptRZYC6zzfkKmwHTILpleA3HMT5Xs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:ab:7e:10:91:11:85:af:4a:c3:90:c3:0e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=a8000c3cad0a45373654ec3e0cfb6be2bbd91c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:43:a6:58:60:59:3d:b7:80:61:c6:be:c6:
                    c0:7f:12:71:32:69:99:ca:3c:61:d1:75:1b:6d:b5:
                    a0:1f:ce:7a:a5:4e:a3:47:37:3f:f3:7d:b0:b1:17:
                    c5:f6:b9:77:8c:b4:e2:1d:cb:d5:22:7c:ff:14:1e:
                    b5:4f:f5:70:21:ce:3e:b6:32:7e:7d:19:1f:3e:cb:
                    6a:2c:8e:4f:29:e2:62:55:06:54:63:63:7a:2b:18:
                    f3:dd:66:47:c3:2d:18:bc:40:69:df:d5:a6:b2:66:
                    b4:7a:cf:1f:03:04:63:5b:28:37:5f:ea:79:8f:24:
                    f0:d5:f6:1c:83:c8:98:27:19:d9:e3:5c:a2:43:49:
                    37:e8:60:d5:54:37:b5:4f:f6:02:b6:75:cf:b9:e3:
                    4e:75:ff:05:fb:06:ac:a2:47:cd:15:5b:cb:28:4c:
                    c0:77:cf:90:c9:0f:4b:b1:86:ec:5d:94:db:e4:75:
                    bf:2a:49:6f:55:6f:8e:5f:75:96:2e:77:a6:0c:bd:
                    06:34:ef:81:57:68:b7:c5:9c:55:05:f5:c1:0b:2b:
                    ac:d6:6b:3c:ba:a4:a6:2b:3c:6d:68:06:25:79:33:
                    33:9a:91:54:8a:d4:b5:38:41:d2:bf:68:29:b6:94:
                    e7:10:44:11:d0:c7:69:25:fd:dd:59:76:1b:36:26:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:00:0C:3C:AD:0A:45:37:36:54:EC:3E:0C:FB:6B:E2:BB:D9:1C:97
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:54:af:42:08:6d:70:9d:e9:df:e4:26:6c:0f:af:c6:62:4b:
         bb:b0:d4:d8:35:0c:98:7f:81:ae:9f:e4:05:82:18:94:c2:fa:
         40:fc:1c:b2:4b:8f:80:44:8c:d3:4a:a7:fe:da:6e:35:d4:4a:
         95:49:0e:16:0e:fc:18:ea:f6:ba:31:17:15:eb:31:1f:da:ed:
         85:41:a9:a5:f6:b2:c8:c1:b4:45:8a:4e:32:af:5a:b2:61:53:
         ea:2c:e9:bb:6f:22:05:a8:d2:2e:a4:24:71:67:6b:78:73:a1:
         2b:27:4f:3d:f9:50:b3:fd:b1:c7:6f:4b:33:1d:95:cf:07:86:
         ca:82:04:44:ff:0d:98:4c:01:90:53:9a:d6:a2:ea:4f:9f:dc:
         03:d8:4a:33:e7:72:69:19:24:72:50:8b:e8:73:54:07:75:88:
         4b:1d:53:b2:aa:fb:12:ac:ef:65:1e:23:95:94:c7:ad:92:4f:
         28:3e:c7:77:10:1d:ea:5f:eb:78:3d:28:b3:dd:c9:ac:7e:bb:
         7c:c9:95:ae:be:69:4c:c2:90:50:76:ed:ac:72:2d:d7:ab:9a:
         28:31:9b:4c:ec:8f:a5:7f:fc:02:f5:39:50:29:71:cb:01:6e:
         f4:e1:11:16:69:9c:bc:3c:ef:86:82:95:ac:d9:6b:dc:ba:bd:
         a1:f2:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----