Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File:                     ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier:          Ea5iFECuypH8wdiaNnje/R3YFOn/c1/CQFssVL+hr/w=
Subject key identifier:   A6:E1:2A:88:0C:DD:0B:54:BC:2E:CC:FC:22:19:0C:4D:80:05:B2:37
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer:       /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial:       01962E995C1FF534F159986AFF88974373B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=)
                          2: Zt9BdmMIpkw0MIyHiOhuungStoE.roa (hash: L7P2p04wT0zw3+4RreSfPUQp7foJhVeuqfmP5tYHfcQ=)
                          3: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: lYiKTuRThP+AedJ3M86xA2F+xoVIpaPaGLQ9g9LpFuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:1f:f5:34:f1:59:98:6a:ff:88:97:43:73:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=a6e12a880cdd0b54bc2eccfc22190c4d8005b237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:93:d9:b0:92:5b:05:4c:51:ad:cf:c2:1b:
                    91:d4:2d:7b:b7:f5:44:2e:3a:2a:9c:06:50:51:36:
                    0b:2f:f8:b9:08:7a:4a:4a:16:f5:4e:1d:60:10:b1:
                    d0:4a:e5:c9:91:0c:c0:d1:6c:cd:70:78:f1:8c:81:
                    18:ea:5f:df:73:7e:18:b0:87:8f:b7:8a:c1:08:99:
                    dc:9f:84:b4:e0:4d:d1:9d:96:40:31:06:17:7a:9a:
                    5b:ab:ee:06:ee:db:1b:be:8d:f3:f3:1d:9b:b1:89:
                    27:5d:87:93:3b:34:0a:10:a6:05:57:9d:69:18:90:
                    e1:ad:d7:f9:32:24:9a:83:39:6e:57:1e:12:fb:50:
                    01:d6:2c:23:36:3e:cb:0e:58:87:ac:f2:2a:e5:34:
                    df:8f:ec:b2:99:c3:a5:bf:2c:85:85:08:41:92:1d:
                    5a:4f:71:78:b6:be:cd:55:cd:a2:c7:00:10:29:c1:
                    d1:96:db:4e:d1:db:12:4c:83:45:13:3b:6f:83:0c:
                    6f:06:10:34:88:14:b8:a8:fd:7e:e8:27:ef:af:ad:
                    22:d8:78:17:7a:4a:d1:51:7e:41:d3:11:11:10:63:
                    83:3e:f1:e3:3e:9d:a4:c6:d3:a9:1e:69:35:d1:b9:
                    b3:9d:ca:3d:d7:b3:a5:3d:19:11:d9:8d:d8:b9:35:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E1:2A:88:0C:DD:0B:54:BC:2E:CC:FC:22:19:0C:4D:80:05:B2:37
            X509v3 Authority Key Identifier:
                keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:15:9d:b6:78:8f:21:84:2a:0a:37:cf:32:0d:4d:63:fb:
         d0:9e:64:af:0a:75:6e:02:cd:be:0b:8c:2b:c0:8d:1d:fc:e7:
         52:f1:4a:29:4a:34:a0:2b:af:b6:6f:ac:b0:98:e3:27:9f:c0:
         1c:f9:2e:8f:44:4c:22:50:75:3d:08:59:cb:e7:b3:ab:2b:7d:
         f7:e2:86:ed:a2:cb:0a:29:c1:c3:3c:af:69:cd:56:a5:22:a0:
         83:f5:57:7b:22:de:2f:f2:b8:72:03:1e:12:40:7d:99:b9:db:
         46:13:a3:22:0e:78:6e:40:77:6f:88:f5:17:d2:98:d9:45:a8:
         bc:34:84:e4:ad:c1:d4:a3:b1:43:d1:f3:a2:a2:95:53:fb:4c:
         cd:b4:72:94:cc:71:ff:c9:02:70:36:84:2a:35:97:c2:52:73:
         0d:80:08:f5:5e:5f:95:b4:7d:48:fa:ca:84:39:cd:96:41:88:
         a8:d9:a7:2e:ef:a5:10:6d:fe:af:08:e8:16:c9:90:e6:16:2d:
         d9:7e:85:8c:0d:f5:bd:e0:02:18:81:cd:8d:73:f7:24:85:7a:
         aa:46:c9:4a:5c:f1:4c:10:eb:4b:4a:02:ef:20:4e:87:cc:02:
         ae:d6:55:f7:8b:32:5b:f1:5e:a5:e0:be:9c:7f:75:78:15:c3:
         00:69:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----