Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File:                     FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier:          FU8h6pP2y8A4KtKjtvXqkhS4Kc36C+QqTiBRUJzxRns=
Subject key identifier:   0A:C3:7E:41:D0:5B:32:A8:37:5C:01:C6:54:7A:0F:D8:9A:A8:61:AC
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer:       /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial:       01962E997D2C0B0637EB4BFB888E929AFA85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: /peQZOkLDhmSfF1kn9+yI0Q3AnFu3u0RmPINGUYs29M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:2c:0b:06:37:eb:4b:fb:88:8e:92:9a:fa:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=0ac37e41d05b32a8375c01c6547a0fd89aa861ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:b5:a5:11:b3:b3:b7:6b:f4:89:52:e4:ea:
                    ca:d0:7f:35:11:17:77:21:13:e0:08:69:52:db:7e:
                    22:b4:ca:b9:de:df:f2:60:7c:89:25:e5:4a:8a:04:
                    78:96:41:32:19:f6:a7:0c:7a:cc:0b:cf:a5:53:8f:
                    e2:60:be:74:a5:5c:3a:4b:b6:43:3b:7a:b8:03:3b:
                    2c:6c:68:85:5a:f3:45:a3:14:a3:74:fa:c6:ed:0d:
                    5e:c5:1d:b1:30:18:97:bf:26:c1:e9:12:19:7c:ae:
                    56:b3:3f:8a:14:d2:6a:a6:d8:ab:54:b0:07:3b:c4:
                    b1:39:dd:85:70:f6:5d:fb:ff:f7:cd:10:9c:26:10:
                    5a:da:35:6c:08:7e:f9:6e:d3:8e:fc:a2:ae:d1:d3:
                    fa:56:31:ca:7c:e1:26:1b:45:60:04:07:8c:bb:fa:
                    89:76:f0:e5:44:d8:dd:ab:ad:2d:c5:35:0d:26:d7:
                    56:cc:69:e1:de:53:75:37:0d:d4:5c:ab:d4:14:89:
                    93:2e:be:ef:a3:4f:0e:80:ae:bd:83:57:61:24:77:
                    de:be:53:8a:50:96:a8:db:e6:f6:ac:c9:c6:43:46:
                    28:42:e3:49:cf:ae:ff:ed:47:5e:f1:68:32:a5:3c:
                    bb:5e:e8:8f:4a:0e:08:5f:a9:be:79:2f:1a:c7:7a:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C3:7E:41:D0:5B:32:A8:37:5C:01:C6:54:7A:0F:D8:9A:A8:61:AC
            X509v3 Authority Key Identifier:
                keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:48:e6:13:d4:e8:4a:cb:95:bd:61:8b:78:d8:0f:ef:f2:c2:
         91:bb:25:b9:ea:d3:83:f9:a1:43:e1:52:09:3f:ec:51:c6:38:
         0f:df:e7:53:ba:cd:65:90:43:b8:06:a1:56:bf:aa:51:69:60:
         5c:ed:c4:35:36:7e:e1:fc:d3:6a:7c:70:dc:2e:44:7f:d2:3d:
         9d:da:3c:35:b2:bf:c9:69:60:00:99:f8:78:fd:c8:4b:f7:f8:
         8c:c0:28:7d:fb:95:fd:9f:c9:ac:d3:de:54:73:e2:50:73:83:
         48:9e:77:e6:c5:66:10:7e:d7:6f:4d:f7:46:58:f6:a6:c0:d7:
         ff:0a:43:ac:10:b9:33:7f:20:2c:a7:99:59:b5:3f:64:5a:75:
         20:a0:3f:9c:b6:d6:3d:0e:f0:d2:49:09:3d:e5:49:c9:b9:4c:
         3b:8f:64:24:34:84:51:d3:1f:e9:fc:c4:6d:6c:75:0e:b1:8e:
         7f:6f:29:69:1c:b9:57:ab:3f:eb:63:ed:22:44:42:6a:1e:13:
         a0:3c:11:6c:59:39:3e:40:7d:ab:87:20:12:3f:96:25:6b:21:
         9c:ea:cb:10:65:16:a5:de:2c:cc:2f:5a:e3:1d:e7:43:0f:92:
         0e:df:bd:e7:6f:9c:02:c4:42:68:9c:92:25:0b:48:7a:58:c8:
         f5:10:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----