Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File:                     2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier:          aTZQnkAV434MUceLeExA0OvGF3FAMvdCN/A+fngodNg=
Subject key identifier:   B6:3A:97:19:96:05:4C:60:CB:C5:28:74:76:A7:E2:A6:D1:C1:69:DA
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer:       /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial:       01962FAB6A0A71C6A878FC2D66F5DAD50382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number:          0DBD
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: 7Us7t5cLZN2e+2zkUUABoAlwhv1o6FtOBZLy/eUCSYI=)
                          2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:0a:71:c6:a8:78:fc:2d:66:f5:da:d5:03:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=b63a971996054c60cbc5287476a7e2a6d1c169da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:9d:b5:fa:26:ab:5e:c4:c5:50:04:a4:44:
                    95:ab:fe:11:36:3e:99:0b:8e:b1:b9:41:5e:6f:2e:
                    49:40:81:4e:ce:60:7d:2f:60:40:c5:68:af:fe:98:
                    ef:6d:89:18:2b:4e:b5:68:4d:6d:fd:21:61:0c:5a:
                    9d:1e:f2:3c:8c:53:23:91:1f:35:8a:77:40:b5:dd:
                    d0:a5:22:00:c0:28:ed:6e:dc:f7:5c:ea:f4:b0:6c:
                    75:41:2b:bf:a2:af:de:6b:8a:21:be:0a:9f:d9:8d:
                    fe:33:fe:52:22:1c:85:a2:40:e7:4d:cc:1d:22:ff:
                    f4:07:2e:da:1c:23:a9:97:f8:37:c2:9b:f4:25:51:
                    83:0a:db:19:78:34:76:cb:bf:ef:79:78:6a:4c:b1:
                    ff:ec:47:a8:38:b5:c9:f3:1d:46:bc:13:21:57:81:
                    ff:8c:8d:08:d5:f7:2f:9c:48:7b:72:74:ea:bf:d0:
                    93:e5:d3:a9:3e:d3:90:62:8e:82:d8:f5:33:fb:78:
                    23:19:f7:51:8a:17:25:79:bc:19:a4:1b:d2:9e:cf:
                    7d:eb:6c:62:d7:94:c4:fa:03:d6:83:cc:ec:99:69:
                    2d:ba:87:f8:ff:9c:c4:3c:05:fd:61:58:94:a6:2e:
                    8d:a1:16:3c:b7:14:70:a6:53:c2:b2:14:15:ee:64:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:97:19:96:05:4C:60:CB:C5:28:74:76:A7:E2:A6:D1:C1:69:DA
            X509v3 Authority Key Identifier:
                keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:c3:1f:2b:a6:72:2d:bf:42:0b:6f:c5:ea:c6:63:33:30:
         b3:47:b4:44:25:1c:35:88:69:5a:b1:65:be:e6:ee:02:48:c0:
         08:87:30:e2:c6:ac:c0:5f:66:40:4c:6d:04:8a:f5:73:34:f2:
         2f:50:a3:d9:d8:4d:b4:02:7e:42:01:a5:b2:5e:01:04:d5:50:
         6d:84:40:50:ab:ab:d0:b2:aa:81:95:40:f8:29:eb:d9:dd:14:
         c1:4f:04:e8:38:85:78:f0:b8:eb:f6:a4:76:2c:ee:ed:c6:83:
         15:bb:18:fd:a3:0a:6b:78:e6:4e:8f:70:14:93:8d:aa:20:da:
         a7:ab:80:5d:7f:7e:ed:a2:18:b6:af:f9:0e:83:8f:7e:9a:73:
         5a:7f:3a:84:6c:2d:18:09:62:00:5a:86:a4:54:6e:fc:41:54:
         8c:58:97:5d:c0:94:14:6c:f5:87:0a:d0:68:c9:a6:ba:5d:59:
         34:82:13:b3:e5:20:aa:e7:42:c2:06:06:5c:a9:c8:5b:a4:4d:
         37:77:1f:d0:1e:10:a1:25:b2:d4:89:26:49:9c:88:cc:bc:2f:
         92:8b:d2:ab:b2:cd:a6:5e:29:31:c4:6b:7d:77:ce:ff:dc:88:
         aa:3a:70:ee:de:11:4d:af:8e:82:6d:cb:a6:df:a7:8a:dc:0a:
         22:4c:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----