Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File:                     PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier:          J7pWdKbT+de2+a4fPgvH/BBi9uaGllYHQQN/I+3MkOA=
Subject key identifier:   D4:9F:43:F4:D9:50:8A:0E:66:BB:E5:E8:41:26:BB:E2:06:B3:9E:88
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer:       /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial:       01962F069172C685B3BE964A0F5A884E273C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number:          0E2F
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: Lf/TgzVG11OMZ3cGxvCZBtwymPvqUwNvn+vcieQ5hSw=)
                          2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:72:c6:85:b3:be:96:4a:0f:5a:88:4e:27:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=d49f43f4d9508a0e66bbe5e84126bbe206b39e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:51:b5:25:f5:f8:3b:48:32:7c:b3:f0:ec:
                    b9:29:15:06:87:be:3f:9d:83:0c:d8:eb:dd:82:22:
                    a8:f8:44:93:fa:bb:e5:b7:37:5f:15:2f:ea:43:78:
                    01:84:44:4b:78:df:0d:81:66:2d:3b:7c:cc:06:42:
                    3b:23:51:5a:29:9f:9a:aa:66:07:38:2b:ff:9c:5c:
                    93:46:67:19:64:09:3d:77:bb:dd:ba:e6:f6:11:f8:
                    4e:8e:9e:e0:ad:a5:48:1f:30:cc:b1:0d:25:67:57:
                    57:f3:01:16:14:88:a7:35:94:d9:c4:ea:69:0f:b5:
                    39:37:b0:9b:8b:c7:01:37:de:d7:d3:26:97:98:0e:
                    62:d7:21:4b:1d:02:07:9d:1a:d9:f8:c7:34:2f:42:
                    40:e3:d0:a7:da:8d:2a:35:f9:6c:18:97:80:13:bc:
                    4b:7c:a4:89:1d:c6:ce:2c:fb:d7:2d:d5:dc:77:00:
                    6f:4c:b9:70:44:01:14:94:fb:68:b2:c8:b7:39:20:
                    75:58:31:4b:6a:04:c8:7b:9b:59:00:42:7b:f3:2c:
                    8a:24:92:95:46:40:de:23:10:1f:e9:9a:59:b9:c7:
                    3d:9d:bf:2e:b5:4c:e3:3f:69:ff:47:0b:a3:11:09:
                    df:87:be:9a:b2:10:5b:8d:d3:9a:58:31:e3:cd:19:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:43:F4:D9:50:8A:0E:66:BB:E5:E8:41:26:BB:E2:06:B3:9E:88
            X509v3 Authority Key Identifier:
                keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:3c:da:15:06:d2:78:17:64:09:49:05:77:4d:73:0e:e1:
         bc:70:b3:a5:2e:f2:8d:79:f1:bc:ed:4d:d3:03:4a:96:33:9f:
         d4:8a:fc:f9:e7:91:ee:50:4c:56:4d:b5:2a:af:74:77:89:13:
         77:89:9a:37:90:5d:76:30:5b:b5:7d:bf:2f:58:0c:8f:8e:08:
         0f:15:ae:d4:47:7a:bb:2e:63:40:98:88:84:6d:71:b8:2c:b5:
         a7:60:87:13:36:e7:8a:26:88:c8:2b:a1:67:57:d3:c3:72:59:
         c4:15:f9:d5:45:c1:32:da:1b:58:b4:88:c4:ba:74:e8:24:7c:
         44:76:ef:5c:2a:5c:84:fb:9f:4c:76:97:72:d3:73:f9:25:03:
         90:f6:2b:64:58:22:34:e8:6c:67:ba:e1:ca:a5:48:12:bb:4c:
         32:4f:80:f6:55:3d:16:0e:20:5f:b3:8d:e8:f7:1a:e7:2f:f1:
         19:e2:71:8c:14:f6:ea:18:db:da:64:e5:c2:32:f8:fc:cd:f1:
         18:87:34:cc:ad:75:1a:d9:0c:2b:77:05:5a:b3:41:bd:6a:17:
         32:5d:0e:19:36:8a:8f:ae:d4:b0:1b:dd:0e:b0:51:73:99:6f:
         a5:aa:b4:90:c0:85:c5:64:2d:fd:a5:fe:e4:8d:84:02:d8:09:
         ae:24:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----