Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File:                     pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier:          d6T2DXnWyuW6VPDYH9o8FguJAcesf5LjRlwn5Jcyu24=
Subject key identifier:   3D:0D:75:59:BA:EE:3C:4B:57:6B:0B:28:DC:D2:ED:9F:59:AC:C3:C0
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer:       /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial:       01962ECF94D502B02E4871659EA9ABD4C8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number:          0D32
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: JOAq2MaayN+ZIqieuQdKqrRLXWB7gbxIE64O498wDtI=)
                          2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:d5:02:b0:2e:48:71:65:9e:a9:ab:d4:c8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=3d0d7559baee3c4b576b0b28dcd2ed9f59acc3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:69:d1:95:be:e2:ae:da:00:20:b1:c1:56:
                    57:18:35:b5:1e:80:f1:59:2d:58:1b:d1:a1:f3:f1:
                    61:dc:d7:b3:0b:ba:bb:f9:a0:f2:c8:f6:7a:e9:f3:
                    65:28:73:7d:cc:d0:94:b2:d8:0a:5e:17:38:2d:11:
                    8a:9c:c5:cf:72:19:b1:00:82:bc:ff:d6:5d:af:e8:
                    5a:87:0c:ae:3a:71:55:73:66:e5:59:b2:48:d5:c6:
                    3b:fc:2b:21:83:1d:88:bf:a3:33:1f:fe:23:6b:09:
                    66:10:94:3a:e8:7a:7f:ed:25:92:08:4f:d8:ea:09:
                    79:95:db:c7:a8:f6:5f:29:3c:49:fb:3c:55:e4:e9:
                    b4:a7:6b:03:1d:ac:ca:f5:c8:db:eb:f9:61:72:36:
                    ab:82:6e:f5:72:41:98:58:a5:d1:5e:91:04:5d:6a:
                    87:e9:be:91:1e:b7:66:c2:ee:20:96:4a:4e:0f:3e:
                    f0:c1:e9:2d:9c:c1:c9:60:ac:5d:9a:a6:e0:fb:82:
                    ef:81:8e:77:04:b9:c7:68:c0:2c:f9:8d:90:e3:82:
                    ec:1a:50:f4:b0:40:b4:33:8b:56:dc:0a:ff:46:ca:
                    eb:a7:b1:8a:f9:56:6a:b8:ac:0c:2a:fa:4a:be:bd:
                    8c:0a:b5:be:05:b7:3b:42:33:cc:f9:4b:97:8f:ec:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0D:75:59:BA:EE:3C:4B:57:6B:0B:28:DC:D2:ED:9F:59:AC:C3:C0
            X509v3 Authority Key Identifier:
                keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:42:f8:e2:27:9b:13:1f:69:c9:96:bd:f8:71:e5:8d:83:d0:
         00:24:f3:4e:38:c9:c2:10:cc:4d:28:c0:a5:e5:c9:a9:62:8b:
         05:13:d3:f5:13:84:b5:42:40:27:97:05:1a:6a:24:68:7b:d4:
         9c:5c:07:0f:c1:73:07:5a:04:c6:94:c3:4e:b5:bc:b0:f6:32:
         09:22:37:23:d7:5f:24:6e:f3:11:e8:42:5e:dd:39:b3:c8:40:
         bb:30:3d:65:81:54:77:59:97:90:75:37:4e:0c:7d:4b:5f:0e:
         70:5c:f8:33:1e:16:94:22:ca:76:d0:6d:9e:81:b8:dc:44:70:
         c5:97:0f:55:7a:b5:01:8b:ba:0c:c1:3e:3c:2b:f8:01:3c:41:
         bb:b2:a7:c9:b4:cb:0d:04:3b:c5:78:38:ef:99:60:9b:f5:2a:
         33:c6:7a:36:c4:2a:fb:d6:f9:a5:01:c8:ec:4f:b2:63:14:26:
         e9:dd:cf:55:ba:c2:be:7a:f8:d3:85:20:2a:5f:30:03:39:c0:
         f6:a4:46:4a:d1:ec:e5:38:82:a7:03:6e:09:35:3f:24:01:0f:
         bc:39:6c:57:e5:57:67:a6:69:69:d7:95:fa:06:c1:b3:ec:72:
         24:e5:92:46:2c:5b:50:4b:fc:65:d9:52:a9:09:17:4d:59:eb:
         e1:5e:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----