Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File:                     piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier:          aB916gc2PGsth+Y5e1Sx0lKDxBt07UDi1/CqqYXFcI8=
Subject key identifier:   77:09:2E:45:D7:09:E2:28:3A:F3:D8:07:EE:3B:74:32:BE:36:57:A4
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer:       /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial:       01962F3DC94C2CC14C29C329EAC358E03575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number:          03BF
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
                          2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
                          3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 7DPmst+KLfKZW7sgaVlF13GGrOTXNVIbnrlswXyNpwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:4c:2c:c1:4c:29:c3:29:ea:c3:58:e0:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=77092e45d709e2283af3d807ee3b7432be3657a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:99:35:de:9a:45:f0:81:90:ac:a2:28:c3:
                    e8:20:52:d4:3c:ec:1d:15:fc:f6:ca:4b:b7:24:e4:
                    15:db:f3:05:d5:1b:45:60:24:05:f2:80:81:64:b4:
                    2e:0b:6d:35:27:aa:28:72:16:5f:ec:0e:3f:35:f7:
                    e5:7f:32:19:bb:a6:38:d8:b2:e7:9d:4c:03:63:96:
                    5a:c1:0f:e7:2a:f4:5c:48:6e:76:9c:b2:61:10:18:
                    9c:a9:a1:a8:f4:15:c3:21:74:46:ed:45:3b:7b:85:
                    5f:cc:e5:87:72:dd:70:e2:c4:d0:d3:3f:fb:2e:25:
                    49:b4:af:d4:ed:08:b1:80:15:d8:ce:0d:db:aa:4a:
                    a1:4a:5b:16:89:4e:33:18:58:5e:90:f7:cd:fc:3e:
                    ab:81:98:45:d3:bc:87:b3:9d:3f:57:c9:58:79:9d:
                    52:4d:81:f2:21:3c:1d:f0:41:96:e1:89:6e:69:f5:
                    b3:25:55:63:a7:c1:fb:9c:b4:c6:01:b0:d9:66:12:
                    cb:ad:73:df:27:7c:25:6b:16:4b:a0:50:8b:f8:9b:
                    fc:59:f2:7e:f3:88:6d:bb:5e:69:25:e2:d9:ec:d0:
                    69:8c:2e:83:e7:6b:79:fd:be:6b:80:80:c0:e4:90:
                    24:0d:70:0c:59:5f:7e:d6:fc:51:4c:d5:12:96:36:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:2E:45:D7:09:E2:28:3A:F3:D8:07:EE:3B:74:32:BE:36:57:A4
            X509v3 Authority Key Identifier:
                keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:27:de:eb:92:84:43:32:01:6c:dc:87:f5:7a:67:1c:9a:
         a9:27:dc:4d:40:86:17:99:10:a2:73:67:04:97:0b:5e:98:5f:
         99:27:3e:cb:be:7c:80:05:d8:4a:e5:b2:89:ea:cb:fd:3f:0d:
         4d:a6:3e:5b:69:61:93:b9:f8:88:78:d9:04:f9:09:bf:9a:a2:
         49:13:9e:b5:68:54:53:29:22:1e:91:68:e4:e9:83:a5:56:18:
         ec:be:6b:fa:f3:56:cd:57:24:e2:61:45:c8:f1:c7:29:ff:a4:
         dd:49:0f:16:d7:bc:37:ab:5a:ba:2f:57:8a:a3:6f:6f:44:fe:
         fa:a7:75:39:02:f5:d9:48:e8:f2:eb:aa:6e:4d:c1:27:e9:a0:
         b3:58:45:40:2a:03:cb:03:bd:09:ce:eb:c2:87:6e:11:aa:c4:
         39:b9:7f:ed:eb:e5:21:2b:9e:e8:19:08:7a:77:f2:34:97:0b:
         9e:4c:9e:ba:70:4f:2c:7e:57:04:d6:58:da:7f:5e:a3:eb:c5:
         b3:4f:d5:69:41:42:60:75:4f:c4:20:c6:d1:1d:1b:e1:1f:af:
         51:4a:1c:4f:7e:73:b5:bf:17:ce:d9:7f:37:b3:2d:05:cb:df:
         77:ce:4e:ca:e8:1b:44:cf:26:c6:d0:a1:c1:eb:b7:84:31:92:
         ce:bf:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----