Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File:                     1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier:          jvF7Biwryg3N7hnJUtyARPv/GHh/d3LhJ2782Q9jzNY=
Subject key identifier:   BD:B2:2A:3F:59:2D:E6:AE:15:54:46:7F:CB:F0:E8:DF:1D:FD:9D:2B
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer:       /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial:       01962E6205FD8C3BF3C03641DBC1CAA27F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number:          01AA
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: QNYep2UsxK2AvZNs5ZDrzZ8RgPqmu+z5hTaCIrGXQdE=)
                          2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:05:fd:8c:3b:f3:c0:36:41:db:c1:ca:a2:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=bdb22a3f592de6ae1554467fcbf0e8df1dfd9d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:96:b7:c0:37:45:53:b4:d3:c9:e3:6d:f5:
                    ef:11:4a:73:40:f1:ca:e1:7e:5b:bc:62:17:46:35:
                    02:4e:60:f8:9b:ea:d5:4d:d4:b8:06:d6:08:e4:f5:
                    4f:db:fd:9d:a4:39:62:78:c1:f9:d5:9b:ec:53:e3:
                    12:09:2a:f9:f6:ca:85:9f:1c:48:75:f2:8c:3a:c6:
                    3c:59:a7:72:e5:ed:69:ca:29:e5:18:35:63:0e:17:
                    5d:22:32:4a:d3:92:79:f5:4f:9f:0d:82:3f:87:30:
                    43:5e:8c:0e:36:0f:3d:ae:d3:b7:d1:ba:0a:95:62:
                    e1:cf:eb:d9:fa:f0:e8:f4:70:dd:dc:8c:70:ec:7c:
                    ef:6e:b4:c5:2c:a3:bb:59:84:6c:1f:00:02:42:25:
                    ae:da:7c:71:43:be:53:c6:14:06:32:33:c1:ce:21:
                    b5:b8:30:84:39:f6:67:95:c5:3b:7e:0f:4b:d3:44:
                    08:02:1c:9c:6d:9e:4d:89:de:7b:39:19:0f:3e:47:
                    78:96:99:2c:06:5e:36:a3:f0:0c:ad:54:4f:e2:d2:
                    f3:5e:3c:12:2e:df:69:61:dd:ec:44:ef:74:cc:d2:
                    a0:61:d1:11:77:ba:db:45:c6:32:bd:d6:ed:fc:c1:
                    4f:17:40:8d:cc:b4:c3:52:13:b2:a5:e2:02:d6:36:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:2A:3F:59:2D:E6:AE:15:54:46:7F:CB:F0:E8:DF:1D:FD:9D:2B
            X509v3 Authority Key Identifier:
                keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7b:a2:8c:21:5c:fa:85:17:e4:aa:c5:c2:d4:2f:4f:b9:46:
         cb:a8:b8:c3:67:5e:4e:8d:00:f1:f8:1a:8c:72:d8:c8:63:83:
         0f:ea:ec:0e:c1:e2:19:58:06:25:70:4a:85:3f:41:2a:da:34:
         fd:cf:db:ae:a9:83:35:f5:17:6b:3e:24:40:5f:1c:ff:bf:ff:
         c5:4f:49:5d:68:7b:44:7f:53:3f:c9:4d:dc:f9:4e:55:d6:b9:
         d2:7f:3f:8e:d1:08:95:8c:ca:51:61:91:60:5c:80:f8:7f:f1:
         55:90:5e:9f:81:ea:64:ae:ab:fd:fb:c6:47:75:9d:37:c5:f3:
         91:d7:50:e2:f2:db:19:94:bd:fd:fe:93:18:9e:70:b1:86:8d:
         89:53:25:c3:56:dd:f1:91:82:59:7e:aa:d9:1a:05:cc:9f:bb:
         8a:60:3d:5f:22:63:ff:62:94:38:5a:7b:46:87:26:ee:8c:5b:
         2e:bd:8f:83:dd:47:b3:59:7c:0c:ee:2d:78:81:50:de:66:bd:
         ad:07:1a:7e:18:0f:e3:82:22:79:78:9a:a8:c2:27:92:e6:2a:
         c6:c7:cf:bd:3d:f3:cb:91:e3:51:b2:93:f7:03:02:e7:2a:87:
         31:8e:a5:24:c7:21:60:13:bb:ef:30:1d:e6:8f:f4:45:7f:ee:
         1c:9b:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----