Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File:                     FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier:          s+VLtEOLNdlzefPd1bW+Anu2FNhE26fY1XJNyX2ZJPk=
Subject key identifier:   5F:52:1D:82:11:1B:21:42:94:97:2F:87:D2:AE:56:D5:F1:2C:51:A6
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer:       /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial:       01962DF3AF5D6253632BCCE4F97B9F6F7DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number:          0E0D
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
                          2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: LKUJEPQOBB0LZDIRKGIxYAasa5sL2DwKFhRFWbQn1qA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:af:5d:62:53:63:2b:cc:e4:f9:7b:9f:6f:7d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=5f521d82111b214294972f87d2ae56d5f12c51a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:be:40:27:7e:06:4c:28:34:51:cb:84:0e:
                    14:78:7e:54:cf:85:a9:91:8c:d3:b9:f9:77:81:f2:
                    cd:2f:1d:90:ab:a1:90:9c:2f:83:2d:cb:d1:b9:07:
                    3c:db:cb:c8:1d:9b:cc:f6:86:57:74:54:c7:bc:ec:
                    4e:e8:16:3b:a5:23:19:0a:30:9d:93:3b:c6:62:1f:
                    bf:ea:86:3b:a9:a0:74:26:32:39:a1:7b:d7:40:00:
                    37:0b:57:8a:89:c1:02:4f:f4:0d:16:14:d0:04:b9:
                    c8:3d:12:4f:dd:57:77:c4:82:5d:a7:b1:73:7d:6c:
                    08:5c:67:10:ad:57:9d:96:6c:23:d6:8e:2e:63:33:
                    f9:59:6e:97:bf:dc:f2:0e:c0:5d:78:20:25:59:de:
                    48:c6:ec:67:3b:1b:cb:b9:95:39:dc:65:e0:ad:82:
                    7f:f4:25:52:bd:1d:90:51:af:7e:51:d7:6f:cf:1e:
                    02:a8:cc:58:2a:f2:76:fe:82:9c:b3:b1:78:43:06:
                    9e:39:c3:85:41:ac:05:de:97:32:39:95:ca:47:c9:
                    9d:15:6a:e1:6a:66:9b:71:8d:49:ae:f1:b1:24:50:
                    77:1f:c9:c0:21:c5:59:71:55:06:ca:16:3a:39:a6:
                    e3:0a:f0:e2:66:bb:99:4b:33:a0:bd:60:92:d1:b9:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:1D:82:11:1B:21:42:94:97:2F:87:D2:AE:56:D5:F1:2C:51:A6
            X509v3 Authority Key Identifier:
                keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:53:86:98:74:c4:7b:94:75:b4:cf:0c:de:84:79:d9:63:37:
         bb:6a:7c:5a:c3:2c:3c:cc:bc:ee:f6:fd:cc:a4:60:89:50:40:
         22:93:4c:e9:b7:91:a8:52:25:07:df:c4:8b:f0:5e:44:14:d2:
         49:0a:7b:08:8f:a4:1e:47:c9:d5:54:29:98:b5:0c:4d:9b:b3:
         d2:0c:c2:68:19:40:68:ed:cc:53:8d:45:46:86:44:b7:d5:4a:
         f0:ee:dd:d5:86:3c:de:25:c3:04:f3:5d:d5:47:e6:0e:c0:1a:
         93:3e:37:e9:d1:c0:07:79:2a:3b:b8:b2:62:db:85:80:00:93:
         39:31:eb:5a:64:b0:50:3c:31:55:2c:63:19:24:aa:68:18:ea:
         6a:59:61:af:65:02:4c:ab:60:5c:62:85:2e:af:10:bc:a5:1f:
         9a:89:de:9c:62:34:70:5d:49:7e:65:a9:33:d0:87:67:c7:ae:
         fa:5b:c7:db:7d:37:ff:15:35:5c:a7:15:e6:4d:75:cb:22:b9:
         58:78:9b:09:54:67:0f:73:8d:cc:36:d3:6e:d1:f1:27:91:d2:
         4b:c1:ec:11:08:64:94:20:dd:c1:4b:91:f4:b3:1f:ce:84:39:
         b8:9e:74:97:43:d5:ea:77:11:f6:2b:b6:ba:9e:04:20:73:d3:
         4c:7a:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----