Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File:                     pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier:          hyShwIY8qKiEm+6sxIjzUdnCK+jC5OaZELp5ce7z1O4=
Subject key identifier:   68:3D:5E:DC:E6:D6:0F:B6:E1:49:0E:38:3A:58:E8:E4:41:3A:A6:54
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer:       /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial:       01962E2B120B56F4002E28DBC3D2A9774A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
                          2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
                          3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: /YxnffbojMY4lheWDwflr4QmNCjHOcnkgxyzNbrhUsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:0b:56:f4:00:2e:28:db:c3:d2:a9:77:4a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=683d5edce6d60fb6e1490e383a58e8e4413aa654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:40:96:52:72:6f:a6:fa:ae:96:a4:c7:63:
                    fd:bd:77:4a:29:0b:62:34:16:89:7d:ee:62:34:fd:
                    3a:f2:0d:2a:7b:f1:f5:e2:cb:86:09:5e:32:42:ae:
                    62:33:09:ad:32:cc:28:08:1a:3e:fc:4b:ab:2b:21:
                    61:23:b0:37:4c:e9:05:ab:e3:55:4e:b8:45:03:89:
                    2b:62:c5:66:4d:84:ec:c7:5a:2f:38:ff:7b:bd:d4:
                    4d:ce:07:b9:ba:bc:d2:87:81:4f:72:5d:52:73:b6:
                    47:40:6d:42:26:3d:51:67:42:6a:05:5b:f8:50:b1:
                    6d:73:a1:d3:bb:07:3d:ac:07:a7:96:a9:e5:ed:b0:
                    10:66:d2:e8:bc:9c:f1:38:91:73:a3:9e:20:68:31:
                    bf:f4:5d:43:e0:59:44:a1:ce:65:51:74:0b:36:a7:
                    60:84:bf:38:84:4f:a0:88:8e:19:5e:4b:e2:56:b7:
                    d8:26:04:a5:28:d7:a0:71:79:7b:1a:6a:ff:69:97:
                    ae:cb:a6:9d:14:55:d9:bf:61:86:d1:f8:bf:78:5d:
                    e8:9c:8b:85:04:58:30:a3:46:75:66:41:3d:bd:14:
                    b0:3d:3b:a2:20:1b:de:62:39:a8:82:6e:fd:a0:13:
                    8c:b1:6a:7f:0d:d1:77:84:16:d9:e6:45:94:5b:50:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:5E:DC:E6:D6:0F:B6:E1:49:0E:38:3A:58:E8:E4:41:3A:A6:54
            X509v3 Authority Key Identifier:
                keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:81:ba:17:64:88:8a:8b:da:d4:b2:74:04:3b:28:4b:1d:f1:
         76:b2:b1:3b:15:09:d9:e4:17:f5:ab:7e:18:b2:14:18:d7:eb:
         22:40:06:20:55:e8:a6:7c:82:d4:4e:ff:1f:56:63:2d:2f:ba:
         f7:1b:42:4f:ba:d3:b0:8c:08:13:51:52:89:d6:91:64:39:46:
         d0:34:e8:e3:e9:fe:3a:5b:e2:db:0c:c1:2d:46:4b:f9:4b:e7:
         0b:2e:5d:9b:93:69:2c:52:e1:15:13:a2:e7:50:98:22:33:86:
         6b:96:7f:70:da:74:de:3f:f0:90:3d:e4:a1:8b:aa:2c:06:95:
         82:a4:aa:45:de:30:f3:ab:c8:7a:9c:e9:72:09:47:27:23:55:
         d1:74:67:c0:70:2e:00:f7:ca:6f:0d:46:37:72:5d:22:e6:ff:
         be:22:6b:ee:13:64:1a:9a:0c:14:a5:ca:ff:35:5e:15:fb:25:
         04:19:dd:e5:24:7b:f7:06:8b:c6:d7:71:37:23:12:94:57:c2:
         86:ed:6d:ef:0f:e8:47:ae:40:13:84:b9:a1:ee:62:5a:34:93:
         d8:3d:af:77:80:be:33:61:2a:1d:21:43:a0:9b:99:fb:fc:59:
         be:af:31:80:d8:48:13:1d:bd:4c:51:73:d3:f7:7e:1c:d1:70:
         77:7f:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----