Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File:                     sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier:          UXuRq1clxCt0pXsfhPP9dv0nNmgQZRfzCkSiJ1ySJuY=
Subject key identifier:   2F:C6:B7:77:61:80:C8:81:7C:9F:DD:44:14:84:62:A3:69:01:12:95
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer:       /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial:       01962ECF9CD442592507A190D2F02CEA1F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number:          0E50
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
                          2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: pr8CMm74c6i4c/z6byX/PKlta8Odh/FdMLqAqc7HgUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9c:d4:42:59:25:07:a1:90:d2:f0:2c:ea:1f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=2fc6b7776180c8817c9fdd44148462a369011295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:ad:34:ce:9d:6c:3b:d4:6e:f1:d1:87:86:
                    75:70:c6:e4:a3:13:d6:b5:37:d7:c0:ef:11:07:bb:
                    03:56:a7:3e:cb:51:a0:94:03:1e:87:d7:8d:dc:b5:
                    f3:65:0a:4e:72:10:7a:4a:8d:d7:f9:fa:ed:31:2f:
                    41:d1:bd:ee:b8:62:f8:94:fc:a7:05:d4:32:81:89:
                    c1:64:26:1d:41:fd:e0:a5:30:4d:b2:59:d8:1f:f5:
                    5f:38:df:3f:90:eb:20:9a:2e:e5:52:90:b1:e4:15:
                    bd:df:6a:c4:74:f6:6e:c4:4d:15:d9:e6:54:eb:4e:
                    c6:e3:43:ae:04:c4:22:db:db:ea:76:2b:bb:e3:ed:
                    db:03:73:51:f4:e2:e3:5a:8d:5f:59:26:44:59:5b:
                    a4:c8:b0:77:b3:34:79:98:bb:24:49:e9:af:15:fe:
                    13:70:d7:bc:74:91:eb:21:9f:d1:6a:9a:2e:d1:09:
                    c3:9b:6f:96:86:30:da:ed:a9:54:eb:9e:fb:68:d8:
                    be:18:f6:ef:bf:14:67:1d:ca:18:5e:ea:ea:82:87:
                    bf:bb:5b:97:85:70:5c:ac:87:1d:0d:28:18:68:24:
                    98:f4:ff:70:22:4a:c6:d6:2f:93:31:be:36:0f:ac:
                    83:a2:38:3d:74:a9:bb:f5:10:cd:14:08:f7:33:7c:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:B7:77:61:80:C8:81:7C:9F:DD:44:14:84:62:A3:69:01:12:95
            X509v3 Authority Key Identifier:
                keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:8d:f4:34:8e:d9:9e:64:04:fb:e6:bd:76:e6:12:89:b3:
         03:f1:c8:8d:9e:36:19:23:8a:6e:0d:cf:93:76:a8:f9:43:73:
         a6:bb:31:6d:96:a3:53:8f:19:4f:cb:f1:de:13:f3:b8:71:a1:
         4f:c6:de:d7:dd:ef:ca:0b:ee:11:f1:49:3c:28:d8:61:32:0d:
         d9:90:f1:b5:ec:81:b6:c0:31:53:07:73:76:6a:da:ae:db:a1:
         c8:19:e2:8f:e1:60:0e:b8:12:2d:9f:3c:67:06:d2:e3:7a:c2:
         d4:7e:2b:3a:4f:73:f7:8a:97:50:06:99:b7:8d:27:9b:f7:d9:
         00:5b:fc:6d:ea:b7:09:1d:d2:72:9c:65:a5:05:10:62:99:23:
         90:f4:3b:e7:0f:6b:92:6e:77:b8:5d:cb:a4:b9:54:4d:52:a3:
         da:f7:80:59:94:8f:75:de:77:77:86:0d:4b:27:af:86:e7:8f:
         ac:64:eb:f7:2e:56:0e:8b:be:f3:ac:f6:56:57:2e:b0:db:b4:
         9f:6b:5f:9a:97:13:74:34:34:6d:21:42:cd:34:cb:3f:01:9d:
         f1:80:a2:97:b1:a1:76:0a:21:0d:02:99:5d:3b:37:6e:d2:24:
         4d:56:1f:d1:2b:e1:19:ef:e9:27:81:53:7b:30:25:ca:6e:72:
         17:28:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----