Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File:                     paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier:          j3Jv5pWQPlgtCAYyCZtTFjQ5Pz5EaMyvjQz6poIMXYI=
Subject key identifier:   82:0D:9F:D4:92:CE:11:37:D8:F5:AB:9F:53:AC:28:EA:FF:8B:50:50
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer:       /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial:       01962F3DBB9C5097B8C4CE2D067A71398647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number:          118C
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: m6lRjSERpbvfRo08rXOHjErHxAoCBGl+NlgaJdwHLHE=)
                          2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:9c:50:97:b8:c4:ce:2d:06:7a:71:39:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=820d9fd492ce1137d8f5ab9f53ac28eaff8b5050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:46:b3:8c:7b:4d:93:6b:e7:f6:86:1c:8a:
                    3e:db:dd:07:04:2e:d8:55:ad:28:ee:0e:6f:df:9b:
                    39:4b:85:59:6c:13:c5:16:6c:08:75:5d:a3:b8:d1:
                    f9:fc:c9:90:e1:11:27:af:3a:be:d5:d4:2f:5f:6e:
                    cf:95:38:31:04:32:e5:10:5f:72:b8:94:0a:62:ea:
                    1b:c7:74:cd:f3:73:b0:f1:eb:17:9d:42:0b:9e:cc:
                    a1:40:01:02:77:cb:df:41:4b:29:9d:7b:dc:d5:6d:
                    77:65:9d:01:07:31:e5:e2:4e:ce:d7:44:e7:a2:3a:
                    c4:7e:6e:c0:1e:6b:ea:9a:ef:37:00:5d:29:78:6b:
                    5c:f1:c4:3a:85:8c:41:0a:fc:a4:bf:f5:2d:3c:28:
                    9b:e4:42:14:26:46:2d:25:52:ed:89:c3:92:b8:24:
                    61:5d:bf:ce:b4:83:da:d2:a2:f9:d0:78:3e:75:a7:
                    7a:13:b7:18:db:fc:ce:e2:8b:dc:81:c9:16:51:ba:
                    36:ed:3d:48:94:79:99:08:57:22:71:52:de:81:79:
                    0c:22:24:98:de:e1:68:aa:fe:fb:91:5d:f8:d1:78:
                    ee:72:cd:a1:d1:eb:26:a9:34:43:e9:74:00:61:64:
                    ca:14:3b:2c:fe:f7:db:3f:5d:00:1b:6c:2d:0a:af:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:9F:D4:92:CE:11:37:D8:F5:AB:9F:53:AC:28:EA:FF:8B:50:50
            X509v3 Authority Key Identifier:
                keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:a0:c1:92:07:82:91:e6:7c:ca:b5:fd:0c:1e:2c:8a:e8:
         71:e5:3c:09:42:3b:c1:ff:4b:ae:58:29:fa:5c:42:bc:4e:82:
         51:80:1b:39:a6:c8:c9:36:0e:b6:2e:34:61:6d:fe:9c:f4:a1:
         96:fc:6d:76:ed:43:fc:ee:82:8f:3e:93:78:93:0e:13:7a:a2:
         73:7d:be:f3:38:bf:14:4f:14:f3:35:93:5c:db:0c:72:c5:ea:
         77:e4:80:4e:a9:ce:6c:f8:cd:1a:c0:1f:de:70:74:ab:75:aa:
         0e:b1:0b:ba:bf:6a:2d:ba:9a:89:86:5a:bd:79:59:53:48:25:
         6f:6b:91:c1:15:09:d3:83:a6:65:d0:50:0e:3b:eb:70:98:a5:
         d8:4f:a1:73:2a:70:54:77:4d:54:55:54:50:7b:b6:1d:75:47:
         92:8c:70:ad:b2:aa:48:be:ec:58:5c:e8:53:06:3b:9c:cc:3d:
         3e:9d:16:5f:7c:c5:de:16:8f:aa:8f:b9:56:29:b8:1f:db:fe:
         d3:2b:f1:c6:34:c5:92:da:f2:1b:7e:43:df:da:88:25:d9:a9:
         3f:f0:69:bb:df:dc:62:13:c8:83:d3:8e:e2:d4:32:e6:c7:1e:
         23:5b:33:fb:b3:cd:9d:b6:15:37:81:d9:81:70:82:70:20:02:
         3a:89:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----