Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File:                     pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier:          p5szm5HfwYNMWWyGk8e55BhswUdRre/fI4WBME1TTWg=
Subject key identifier:   AA:89:C7:43:7F:14:BE:8F:7C:A9:19:E8:AD:07:AB:B3:A5:A4:93:FD
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer:       /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial:       01962E98B1FC177EBB7AC864227494F03DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
                          2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: QOVJ4Utwd1TrWyPP7hODZN341hrJ6gNYbrSJvdSEgTg=)
                          3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:fc:17:7e:bb:7a:c8:64:22:74:94:f0:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=aa89c7437f14be8f7ca919e8ad07abb3a5a493fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:2c:f9:b6:30:37:68:01:75:4b:61:f8:2f:
                    9c:5f:cb:bf:71:f9:f7:9e:19:e0:79:af:94:78:38:
                    77:a1:8c:fd:6a:ec:d2:bf:c1:61:49:8c:fe:83:de:
                    65:45:e0:9d:32:e6:ed:9c:ca:2d:7a:a5:9e:2f:40:
                    b9:8c:4c:1a:38:28:f3:59:82:f6:ef:fd:cf:ca:28:
                    ea:b9:35:36:7b:0e:50:8b:38:bb:53:98:1a:c0:2f:
                    c5:ae:22:f3:e3:1c:a2:df:cd:bf:82:20:03:7d:76:
                    82:cd:14:0e:41:12:4c:2c:6c:b4:9d:d6:e1:ff:a0:
                    55:a8:ee:5c:6f:7b:ed:85:cb:92:c5:45:c6:49:56:
                    84:14:4b:ba:5b:a8:1b:56:ef:c3:4c:1a:0d:73:31:
                    4a:f1:e0:c7:e6:a6:7d:66:8a:a9:36:3e:c2:47:ae:
                    57:26:09:84:d6:dc:37:56:a5:63:55:5e:e5:f5:a5:
                    9f:c5:9c:f4:ac:7a:ba:f0:25:d7:5c:61:3d:40:6e:
                    9a:d3:80:7f:58:48:1a:7b:5d:20:0e:0a:21:0d:86:
                    5f:cd:4e:4c:70:4f:1a:49:00:7a:a8:5a:d1:5c:58:
                    2d:8c:dd:6c:64:a3:7a:b9:1f:b0:fc:ad:de:1b:b3:
                    1b:11:96:3c:b0:87:22:c4:aa:da:e7:fa:0f:44:5c:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:C7:43:7F:14:BE:8F:7C:A9:19:E8:AD:07:AB:B3:A5:A4:93:FD
            X509v3 Authority Key Identifier:
                keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:10:48:01:cc:38:ba:6a:9f:ab:44:25:24:7b:8f:0b:73:36:
         78:85:78:0b:97:cb:f1:ee:b8:40:76:1f:db:d8:e4:e2:6a:f9:
         eb:34:55:42:5d:d5:f8:64:7f:b0:73:5f:7c:4e:0b:44:ff:b0:
         08:68:89:e1:1c:a2:8d:09:57:e9:bf:cc:78:e1:13:4c:3c:15:
         80:58:9e:af:c4:f9:e0:f5:20:59:69:2e:7b:cb:9c:04:e6:97:
         af:a8:21:74:d3:dd:35:09:a9:bd:e4:ab:42:43:d6:22:91:bd:
         50:1e:5d:86:a2:06:48:54:05:8c:96:57:49:9d:c6:ff:3d:7e:
         45:a3:6b:1d:81:e3:b4:c9:fd:cc:da:bc:e1:a5:f9:15:4f:e4:
         c0:c5:2b:dd:57:43:94:03:23:67:de:22:4d:4f:f6:2b:2f:4e:
         29:ae:8f:b2:c3:15:24:e2:35:f8:88:8f:c9:ba:f1:84:a9:16:
         20:3f:31:c0:23:f0:95:4e:e6:eb:ab:48:04:88:00:02:ef:57:
         88:af:59:50:12:6f:e6:f4:85:22:bf:e6:b4:54:58:35:f9:1a:
         e6:9b:ec:15:93:1f:9f:ff:c3:25:4f:07:f0:c8:56:9e:41:e5:
         ba:01:5b:8c:45:cc:7c:c4:f8:b7:0d:ec:9a:bb:8b:b8:4e:f8:
         86:c4:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----