Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File:                     pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier:          OZs0pWHqT7KaMyY0mW67Kpb0w4hEGQdSVh1GoRuT+f4=
Subject key identifier:   13:A1:5E:C0:FC:58:83:47:AD:99:1B:29:C1:3D:63:9F:F9:E4:31:07
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer:       /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial:       01962F3D5A71B2062F380A41E625610254BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number:          143F
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
                          2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: biTC0Br76QSV2Hf3otcCDqEGlEGaV6GgvUf8j5jpibQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5a:71:b2:06:2f:38:0a:41:e6:25:61:02:54:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=13a15ec0fc588347ad991b29c13d639ff9e43107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:11:92:ff:b9:6d:7a:33:2b:99:d1:96:12:
                    60:5c:e9:34:ce:5f:91:56:f7:4c:c5:96:8e:21:16:
                    d9:1b:c3:7c:bf:aa:5f:c9:10:3a:5d:da:b9:a7:73:
                    32:5e:7c:59:44:17:1f:c8:ac:a7:3a:cc:ae:11:ce:
                    d4:43:4e:76:8a:3f:bc:66:96:60:13:27:59:f3:4f:
                    a8:90:13:b1:f4:6f:0b:da:e8:8c:6a:69:57:d8:17:
                    55:c5:64:df:96:d3:10:1a:c3:8c:17:00:af:0e:e9:
                    ab:d1:23:56:d3:1b:43:0a:18:ad:bc:ec:c6:31:11:
                    8f:0e:76:4c:9b:54:03:7f:88:28:be:ca:19:ff:1e:
                    1f:f3:7c:b5:11:39:6c:f0:8c:a7:3c:c6:8f:99:b3:
                    95:d5:fb:c4:a2:4c:fb:2b:9d:50:4e:11:d5:f7:6a:
                    e4:6e:c9:52:28:83:f1:a5:65:84:36:57:9d:de:c8:
                    07:48:c4:37:fe:7b:cd:3f:d5:61:5e:3f:5d:05:8a:
                    2a:af:5a:9c:67:11:3b:a9:5d:0c:29:80:47:6f:be:
                    72:ed:e7:cd:66:0a:96:97:da:54:22:a3:0e:71:1e:
                    0c:ad:cc:f8:f6:cc:71:e6:f4:13:fd:ef:c4:fe:19:
                    fb:cf:1d:fb:1c:b6:7f:9e:d8:e2:dd:f1:78:99:c2:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A1:5E:C0:FC:58:83:47:AD:99:1B:29:C1:3D:63:9F:F9:E4:31:07
            X509v3 Authority Key Identifier:
                keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:7c:28:b7:09:71:fd:8b:62:42:07:59:4b:57:e4:ae:e7:
         9c:a6:50:43:b1:7e:44:73:e5:41:bc:76:bb:5b:d9:81:62:4d:
         3d:00:56:d7:4f:71:b9:df:74:57:46:00:2d:84:fb:60:1c:54:
         89:e3:cd:c7:43:ea:88:a5:4d:50:5c:20:6f:f1:24:df:89:82:
         60:9b:ed:90:c9:8b:4e:90:c1:7a:a5:bd:92:99:d3:c3:61:e6:
         09:a9:6b:d5:79:54:bd:d4:38:ae:ec:0f:44:80:61:3a:d7:09:
         4e:33:e1:a2:7e:1e:76:c0:58:eb:43:cc:c1:ed:a1:6b:ed:88:
         0c:3d:83:a4:0e:ad:fa:30:b3:cf:24:fb:62:13:8a:42:90:49:
         11:ee:3a:2b:02:51:48:6f:11:fe:53:35:38:c9:6c:27:52:43:
         76:63:71:d2:d6:63:62:c1:c4:98:4b:47:ba:66:2e:ee:25:0e:
         ce:bb:1c:40:a1:6d:0c:15:99:a2:48:07:2c:d9:b1:99:44:d6:
         ec:8a:8f:07:26:e7:ee:4d:58:10:3e:73:d4:ad:07:e4:fb:b8:
         9b:89:52:a0:bc:65:df:3b:80:f5:da:71:13:9a:1f:31:f8:3a:
         e5:61:43:e7:24:f2:84:cb:ca:a6:c3:58:1b:a4:42:84:a8:00:
         0d:90:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----