Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File:                     pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier:          F+5pKdPYYzRSMbauRczh330vGvX3XVvjC25uxW0+7jY=
Subject key identifier:   13:C1:4F:DB:84:84:5E:AA:43:7B:52:B7:6F:0E:C3:58:F2:EC:00:91
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer:       /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial:       01962E2AC3312EA181854CC5C0EF96D49419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number:          12A0
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
                          2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: ymjDzXDNO0JcxD2FMULrb5Oi3rP8siCAYb7VsUsieEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c3:31:2e:a1:81:85:4c:c5:c0:ef:96:d4:94:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=13c14fdb84845eaa437b52b76f0ec358f2ec0091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:14:6f:f9:d6:3b:58:a3:8d:b0:cd:72:8f:
                    4d:bf:1a:93:3b:65:dd:23:6e:0b:ba:59:88:f0:e3:
                    6f:18:b5:16:a7:4b:0f:2e:b6:94:91:13:52:92:78:
                    71:74:77:3b:91:7f:44:66:0e:61:8a:0d:7f:f0:cd:
                    b0:53:d2:8b:10:f2:33:41:80:b8:ce:db:f6:fe:e5:
                    b9:3d:58:86:70:bc:08:38:47:32:fd:71:23:86:7e:
                    55:86:ba:27:1e:5d:9f:c7:ca:8f:d6:e5:9c:e2:40:
                    f2:a8:43:44:92:6d:84:5c:e9:49:d6:31:31:35:67:
                    5c:ae:dc:d3:27:bb:11:56:57:fd:09:af:a3:ad:7e:
                    4f:8b:2e:bc:a5:ec:62:bc:ae:33:ae:5d:2a:99:c8:
                    26:9d:37:37:0b:3c:18:c6:b3:4f:54:d2:2d:16:2d:
                    58:07:37:89:51:92:fd:9a:46:e7:be:60:76:89:b0:
                    80:a4:20:97:02:6a:e8:32:0e:75:fb:73:c1:3a:27:
                    31:92:0a:93:25:bd:75:3b:a0:c4:b7:3b:92:2f:82:
                    61:51:60:13:7c:19:17:a0:dd:5d:1a:1b:d0:e8:d2:
                    49:9f:e6:65:37:0a:ff:d5:b6:c4:4f:bd:33:e8:a8:
                    0d:76:81:2a:bd:3b:f0:95:48:c0:5d:b9:08:10:f0:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:4F:DB:84:84:5E:AA:43:7B:52:B7:6F:0E:C3:58:F2:EC:00:91
            X509v3 Authority Key Identifier:
                keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:8b:a0:5b:d7:42:85:f8:43:0f:f2:ce:31:87:ab:1e:dc:03:
         6f:87:f3:92:01:90:0e:8f:e6:a7:0c:80:2d:23:2c:45:6f:60:
         81:dd:6c:5c:c4:68:71:73:74:e1:b6:b5:65:96:b3:ce:c1:e1:
         cb:7d:41:e5:ae:03:b1:82:86:8a:c3:1d:35:e8:a9:0c:58:2e:
         54:e6:22:52:20:29:40:84:87:52:13:47:a6:74:a8:4e:c3:6f:
         5d:06:00:f7:a1:ef:fb:02:3e:19:0f:5b:f4:25:49:fc:0a:4d:
         b1:4c:a1:ad:20:a4:e5:2d:7a:30:8b:6e:86:61:17:6f:3d:6b:
         24:22:ac:a7:69:2e:1e:92:10:9b:e4:12:1a:f5:39:71:d0:ce:
         53:30:11:6a:04:4f:1a:89:f9:85:8e:9a:0a:6a:c3:27:c2:ae:
         0f:b3:7a:7a:64:9e:03:e6:6e:65:41:df:b8:e7:f9:ba:de:45:
         4e:d1:d7:de:a2:b4:4b:22:1e:df:03:35:d9:a4:18:5f:ee:7e:
         8d:27:3f:4a:c9:48:d4:73:45:c9:47:74:b1:37:44:ca:8b:c8:
         17:71:22:1f:2e:32:ab:f7:24:cd:31:fd:f8:e1:8d:8c:1c:21:
         3a:da:b7:c3:52:99:8c:2a:86:3a:df:d7:90:dc:b5:1b:a1:16:
         aa:ca:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----