Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          FMUtxK0TEcXLezfezYXchdDgb1hNO36DU3cOD+QyoeQ=
Subject key identifier:   F7:90:0E:EC:15:63:98:36:3C:1A:04:9D:1E:1A:30:07:B6:1F:D4:26
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       01962F744C47E70341930B2F9CCC3ACF6909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          03B6
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=)
                          2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: zQvkwCtXC0fXBCgnERFDXyjiATHqAYB4VU3R4rVAOGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:47:e7:03:41:93:0b:2f:9c:cc:3a:cf:69:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=f7900eec156398363c1a049d1e1a3007b61fd426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:4b:46:bf:7d:bc:f9:47:f0:eb:88:ba:30:
                    ad:64:e1:48:20:bd:16:45:73:13:77:ab:f3:df:62:
                    2f:49:d8:c7:fe:69:53:13:6c:2f:51:0f:34:76:c5:
                    09:68:08:a1:1a:96:4e:e8:81:5c:d7:9f:aa:64:44:
                    91:09:41:a1:73:e6:7d:78:29:f6:dc:cb:8c:b6:fa:
                    7f:98:41:df:1d:e1:ce:b7:2e:4c:18:0b:1a:2d:a2:
                    85:18:78:3d:36:4c:8e:ff:fd:02:aa:27:a8:d0:9b:
                    1e:72:9e:c8:b1:fc:09:ce:fe:7f:95:e9:dd:bc:14:
                    67:13:92:c7:11:dd:a5:11:95:e1:06:37:8b:90:7a:
                    98:f3:ed:ef:be:3c:e0:e4:17:f7:47:6b:67:7c:3b:
                    55:86:dc:67:6c:ad:2b:55:f5:51:bb:77:0f:1d:1a:
                    8a:06:f4:05:3d:dd:80:a5:0a:f0:a3:ee:86:47:4a:
                    86:b2:44:e1:6a:74:6a:a2:d1:2c:e3:64:1c:40:92:
                    09:09:96:6c:27:d1:39:92:4c:1b:52:74:88:43:14:
                    9e:f6:01:e8:19:67:b9:77:8d:1e:80:fb:49:8a:de:
                    19:ce:79:dc:f2:b1:cb:61:97:fb:f6:24:94:da:c2:
                    c7:9c:46:40:d0:07:27:7e:67:31:48:6b:d2:6d:86:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:90:0E:EC:15:63:98:36:3C:1A:04:9D:1E:1A:30:07:B6:1F:D4:26
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:31:ec:90:20:5b:2d:ea:b0:15:3e:5b:fb:8f:9f:bc:21:01:
         4e:df:fc:eb:30:79:0a:c8:4c:69:a5:c1:a6:ad:c8:10:2d:89:
         95:e9:37:e2:93:8a:64:5c:00:62:8b:8e:53:5f:94:af:cd:3e:
         52:76:d2:35:da:1a:0d:e4:39:ef:44:2f:46:94:62:84:4e:73:
         12:54:a7:70:ff:4b:be:53:03:d1:0a:92:7c:a7:17:06:7b:25:
         d7:ed:87:ec:04:10:5c:df:f4:1a:3c:8e:cb:71:25:59:8e:a7:
         9a:d6:e8:8e:d1:3a:e9:81:bb:32:90:53:6a:57:74:bf:84:71:
         aa:47:18:ab:34:ee:6b:7d:a5:b3:71:89:fb:8f:ab:5b:e9:70:
         a4:8e:57:dd:7a:36:c3:c4:fa:66:0a:35:23:cf:1d:e8:5e:05:
         3e:af:31:a7:43:c0:86:16:25:3f:25:c2:fe:1e:2a:df:4b:7b:
         71:b1:ec:a9:e2:8e:21:78:74:26:ec:cc:8c:95:53:f8:cf:4a:
         13:b9:8e:ab:48:76:88:40:1c:76:26:40:d5:cf:6a:a2:9c:cf:
         18:27:52:10:c3:04:3a:e3:76:f0:8c:a4:29:1d:73:a7:fa:d1:
         9b:6e:c0:d0:17:d7:d8:6c:ba:94:c0:6d:9e:dc:83:8f:2c:09:
         e6:73:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----