Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File:                     pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier:          u9UaQI1M+JgFEOlLpEb7tHybLudkVo02UZ/KHko/TF0=
Subject key identifier:   BA:C6:11:09:C4:D6:1A:5D:7A:D7:FC:42:BE:D3:3D:B6:82:97:8E:2C
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer:       /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial:       01962F3D76C9B2264542171F682D89A0C101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number:          03B0
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
                          2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: O+ryWBg+BCBEViHyn+jLO25PI/gt/skjNKkRKx8JzlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:c9:b2:26:45:42:17:1f:68:2d:89:a0:c1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=bac61109c4d61a5d7ad7fc42bed33db682978e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:7f:23:ef:5e:ad:00:b4:7a:7e:15:9a:0f:
                    ad:df:8b:71:db:45:87:1d:a3:f9:fe:f0:c0:18:9a:
                    78:a8:51:27:b0:08:1d:4c:90:88:23:da:26:fb:0e:
                    a1:3f:64:be:e1:53:6e:24:c2:94:40:e9:1a:32:81:
                    ab:e3:7e:20:09:dc:74:07:3b:2b:8a:f1:53:9a:1d:
                    14:08:fe:a9:03:0a:57:48:6a:c9:7e:cb:d2:8b:54:
                    c2:cf:bc:aa:80:88:92:11:ad:09:fa:08:62:79:53:
                    9e:8e:a6:2a:d5:c7:1e:3c:e4:c3:69:2f:59:64:30:
                    08:f5:10:13:c0:ab:e5:11:46:fb:e2:53:07:41:eb:
                    be:23:2b:26:25:30:83:fc:77:d8:50:ac:a3:eb:e5:
                    6d:9b:31:d1:ea:9d:f2:b1:94:f8:2c:22:50:80:bd:
                    ea:6e:85:64:6b:eb:09:db:b1:d0:5e:65:07:cd:68:
                    6f:cb:39:24:db:e1:46:13:c2:7d:11:03:10:8a:17:
                    c1:56:ec:a0:de:75:4e:02:e5:d7:3b:d0:de:4c:0b:
                    74:1a:b2:02:be:19:d0:cb:79:e3:1c:36:48:77:7c:
                    81:0d:7a:b3:4e:a9:2a:7b:c0:43:3c:e2:1c:ad:00:
                    18:80:6b:ab:94:5b:19:d1:48:74:28:47:2e:16:af:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:11:09:C4:D6:1A:5D:7A:D7:FC:42:BE:D3:3D:B6:82:97:8E:2C
            X509v3 Authority Key Identifier:
                keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:bd:da:66:e7:59:8d:43:a6:0a:97:25:09:73:9c:ec:6c:
         ba:f2:78:35:bc:7e:83:dc:70:8f:a2:ab:6e:01:0f:0b:dc:d6:
         cb:1b:85:0d:5f:61:d6:8a:f6:33:1a:80:21:fa:f9:d1:80:5a:
         c5:3d:f0:83:8d:ee:2d:61:3c:39:83:47:bf:04:0f:6c:f4:fe:
         ff:69:91:a7:74:bd:ff:45:04:31:eb:36:f1:71:1e:01:9b:45:
         57:f0:87:7b:65:5d:89:1e:4f:df:ce:a3:11:f2:66:6b:80:96:
         d4:78:39:a3:e9:11:53:b3:19:db:f3:5c:57:be:02:1a:06:dd:
         b0:dd:6a:97:46:1d:ef:ed:aa:27:43:89:01:f0:d2:af:66:9a:
         fd:d3:ab:0d:2c:33:b5:36:61:c9:5b:63:96:f4:4a:01:90:20:
         19:2c:e4:7a:83:b2:6e:31:3f:aa:55:7b:41:53:5c:3b:e7:93:
         ee:9c:77:bf:9b:9e:e8:a7:a4:aa:9f:0d:df:85:c8:77:7c:bf:
         c2:9e:44:42:39:0f:c0:6e:80:79:d0:d1:08:1a:78:ac:3a:1d:
         3c:45:8a:d0:bc:a9:5e:c0:c8:8f:17:46:c3:b3:8f:95:cc:80:
         ed:50:82:97:36:37:b9:b9:64:2d:d2:9e:d3:00:be:25:f6:78:
         94:71:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----