Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
File:                     FPsZA22DNH9Rl66gLaSmlbkYlYw.mft (raw, json)
Hash identifier:          d9MT4VDYB/rjXFDXX72HB+UT4ebL+TTDDp63omLrxso=
Subject key identifier:   50:80:7A:E5:D2:A0:56:0D:AF:E4:19:16:DD:C4:F0:2D:11:BE:73:A0
Authority key identifier: 14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
Certificate issuer:       /CN=14fb19036d83347f5197aea02da4a695b918958c
Certificate serial:       01962F065A81EE05C8D3F4398E6303149B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
Manifest number:          03BE
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: FPsZA22DNH9Rl66gLaSmlbkYlYw.crl (hash: xfTQ0+sJvVmDmUNTnJmGTVyiXDB77mMKJKCoy5z8wSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5a:81:ee:05:c8:d3:f4:39:8e:63:03:14:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fb19036d83347f5197aea02da4a695b918958c
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=50807ae5d2a0560dafe41916ddc4f02d11be73a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:fc:46:5b:5a:62:c9:9d:af:e7:67:bd:a5:
                    ea:e2:f2:10:66:b3:53:d1:2e:b7:eb:91:c8:58:92:
                    6b:98:64:98:e8:da:a3:08:e9:d7:b1:51:b8:46:69:
                    e5:f5:a1:d2:bd:7b:c1:9a:1d:1f:c8:9b:aa:2f:07:
                    c5:1e:4f:42:fd:3d:55:1e:8a:a8:90:42:ec:db:f2:
                    b7:6e:7d:82:54:a3:f8:10:c1:c0:2d:84:c1:ad:b9:
                    c7:55:60:64:22:5b:25:18:a3:76:23:67:f5:ed:89:
                    1e:32:d1:f7:da:c5:3a:2e:ce:6b:8c:c9:58:2b:f8:
                    d3:96:a9:fe:f0:d4:93:c1:3a:8e:77:34:3f:18:85:
                    34:2e:66:a8:a1:1c:59:0a:56:07:13:32:7a:45:09:
                    be:7c:82:10:ff:f7:6e:4e:61:73:da:45:2a:7f:6d:
                    47:93:80:59:3a:cc:d6:8d:ff:e9:7c:85:fb:bd:06:
                    76:57:02:64:57:4d:18:5e:f7:18:fe:9d:de:12:85:
                    11:0b:ea:97:dc:aa:8a:d5:83:b6:ad:14:e5:c4:0a:
                    08:ae:2e:3e:4d:56:77:40:5f:99:81:26:ac:9d:86:
                    c5:0c:7e:7b:70:b0:03:6b:f8:d6:8d:74:4d:65:7e:
                    66:02:d9:8a:0e:62:da:51:e5:3d:b8:f8:59:a5:53:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:80:7A:E5:D2:A0:56:0D:AF:E4:19:16:DD:C4:F0:2D:11:BE:73:A0
            X509v3 Authority Key Identifier:
                keyid:14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:2e:c9:0f:b7:ac:31:9a:15:0c:eb:45:96:cd:9e:4d:7f:
         81:a8:56:88:87:1e:bd:97:27:10:30:29:84:98:42:ff:52:c6:
         47:9e:ae:61:5e:79:7d:0e:3a:d7:04:04:3c:72:28:d4:ff:51:
         05:04:4e:7e:8f:2b:b9:89:23:0b:09:5e:05:bf:64:de:6c:8e:
         d2:61:f0:91:29:3f:0c:5d:0b:aa:31:6d:d0:c4:3e:18:a7:b5:
         81:b3:94:71:85:55:01:f3:cd:f0:c4:d9:b2:04:c4:be:2b:b4:
         1c:84:c2:b6:0b:df:b6:97:0a:c9:38:fd:3c:34:17:8a:da:56:
         c0:7b:01:94:69:36:e5:20:8d:8d:c1:26:8a:56:c6:e6:e3:37:
         7b:ec:a7:c7:a4:f8:ba:34:fc:e7:57:4e:e4:d5:3c:d3:12:a0:
         d8:9a:e0:d4:ea:f3:e4:d4:b3:d0:23:90:fd:c8:3e:ab:4b:5d:
         c0:97:60:fb:61:f5:7e:57:f9:84:c5:ff:66:8a:b3:a5:d4:02:
         c6:a7:36:6d:50:0a:f5:ad:33:97:f1:91:be:80:95:56:c6:5a:
         02:b1:77:bb:9f:1c:e9:a3:05:ca:f7:a9:49:de:bd:ad:53:1b:
         e3:d8:2f:6a:02:ab:51:84:8b:7b:43:ab:21:40:a4:f5:e1:8d:
         29:38:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----