Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File:                     p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier:          Hr419s2LguPp5WwB0UNIQDpkKLr3oMCp0d+1ubZP120=
Subject key identifier:   28:E8:6F:D8:86:34:8F:07:CF:17:7A:32:49:2A:31:F2:E4:B1:EE:F1
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer:       /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial:       01962F3D3090F24592CCBAEBBE667A321648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number:          0605
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: a05D2as5w-ZphYSOJlRsKKwpve8.roa (hash: xvnLmK5XjCaYTBnLCkguyMd5kItynb1Iv2CauMJIpxU=)
                          2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: f0a+HF5j2A2CS0BaBFJxekSM7HxbBz2y+luw4SJG88c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:30:90:f2:45:92:cc:ba:eb:be:66:7a:32:16:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=28e86fd886348f07cf177a32492a31f2e4b1eef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:63:4b:2b:b5:6c:14:ec:1e:3c:77:16:5d:
                    14:75:85:c7:ae:d4:03:2c:76:77:f9:57:dd:91:02:
                    03:8b:c1:0b:00:40:a5:fe:53:7e:60:27:12:92:24:
                    09:d7:b3:9e:ac:10:83:37:cc:0a:e7:78:d0:d6:98:
                    57:0d:ae:0b:32:93:1a:5b:bf:c9:01:4f:38:65:05:
                    c1:ad:0b:7d:e7:11:54:a7:47:39:5b:b6:21:09:e2:
                    c1:82:94:b7:51:cf:2a:59:5d:d4:9b:42:6c:fb:b5:
                    12:ea:e0:9a:d2:1a:85:a7:5a:4e:4d:41:8d:64:78:
                    4b:5c:15:78:1a:e9:59:32:9b:bb:3d:09:a7:0c:d0:
                    2f:ef:2f:a0:fd:88:f0:1c:c2:95:fa:b7:e2:44:3a:
                    3c:d6:94:2d:18:c1:20:72:30:54:72:32:50:ce:7a:
                    fd:5e:f6:fa:22:d3:97:a3:c5:64:a3:a4:b4:90:11:
                    70:9e:27:cd:73:31:c0:90:c6:99:ce:92:95:6b:c0:
                    46:af:43:18:b5:1e:c0:1c:2b:22:81:68:33:c0:2c:
                    eb:ab:06:e5:8e:3a:11:d5:c0:ea:f8:b7:8b:4a:04:
                    24:49:4b:7e:e7:3c:26:df:a8:c0:43:66:5a:a0:86:
                    41:f6:db:29:ed:35:20:9c:95:cb:10:07:55:41:34:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:6F:D8:86:34:8F:07:CF:17:7A:32:49:2A:31:F2:E4:B1:EE:F1
            X509v3 Authority Key Identifier:
                keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:10:77:d0:36:d2:b1:c1:e5:60:30:8b:99:8e:94:0f:5d:
         74:38:f4:e8:b0:e3:9a:5b:87:e5:6a:36:e0:e8:a4:cc:59:17:
         17:d8:24:3b:97:4d:49:5e:ee:47:46:31:9b:3c:cc:2e:ce:72:
         77:bc:53:af:39:92:71:fc:20:57:a0:b3:2c:e5:84:fa:23:29:
         0d:c1:d9:1b:c4:5e:cd:1f:de:a3:b1:97:34:de:2e:f8:40:f4:
         2c:08:18:7e:94:94:f6:13:c3:46:43:a1:b8:66:45:bd:63:8a:
         79:74:41:2a:fc:87:cc:c6:38:97:18:b3:df:74:fc:14:74:8d:
         26:4c:00:bf:78:28:b6:c4:28:f3:a6:2b:d4:97:4c:44:25:f8:
         43:6f:ef:18:cd:62:48:a2:51:0b:64:98:6f:a1:34:7f:b7:7a:
         fd:cf:a5:b7:e2:4d:0c:b2:75:0f:60:7e:f5:65:0a:98:f6:20:
         0c:99:9f:a6:ae:61:9d:32:fa:97:82:41:63:56:1e:b4:4a:3c:
         4e:47:4a:15:be:b3:ba:bf:11:a5:1a:c8:a0:f4:e4:a3:5a:20:
         35:5c:af:5e:24:af:f4:76:74:1b:05:ad:ee:db:cc:b0:42:82:
         28:56:a8:62:6a:fc:7c:58:7a:35:6f:70:91:3c:2f:e3:9a:18:
         d6:16:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----