Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
File:                     F43VHX5As0tDn4_fTQUUEcU0cuo.mft (raw, json)
Hash identifier:          o2+v1z+Ey9sl5vWyMrpp443vMAAEHNhNV/G/BvyTwz4=
Subject key identifier:   84:74:DD:39:CE:42:55:5E:BD:FC:6D:EE:65:88:07:B5:27:74:82:7F
Authority key identifier: 17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Certificate issuer:       /CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Certificate serial:       01962ECFB09B2237BC08C3CFF4C833FEFDDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
Manifest number:          02B0
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: F43VHX5As0tDn4_fTQUUEcU0cuo.crl (hash: ORBmQoSDrDH52UhX383XWfT+lTfQ1mmkrv/xpbkHZdQ=)
                          2: sY0r0y4AruQYBO-qa1jtodSMRJI.roa (hash: fgiZ0pPukyfp5f/cG9pJMs5XjY+lIWQ3prMocyZ72Vo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:9b:22:37:bc:08:c3:cf:f4:c8:33:fe:fd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=8474dd39ce42555ebdfc6dee658807b52774827f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:27:37:5d:96:e0:3f:de:a2:eb:67:fb:05:
                    7c:dc:60:4f:73:ed:c5:3e:ae:33:c5:ab:6a:31:56:
                    af:d5:f1:06:6d:a4:5c:fa:28:15:78:08:ed:79:13:
                    47:d9:70:e4:42:a0:2e:95:95:5d:e0:5e:9b:4e:bb:
                    60:7a:09:3e:6e:e1:4e:02:ab:2b:43:32:61:65:49:
                    f4:3c:29:c5:bb:d9:76:9a:20:b3:3b:2c:a1:81:cc:
                    1b:7e:cb:ae:d6:5a:21:32:86:0d:2d:4f:ae:99:2b:
                    64:20:a7:57:4a:72:70:c8:95:e2:74:fa:fe:9c:3d:
                    60:af:3d:16:d7:17:c7:6a:27:87:c6:ce:05:b2:59:
                    65:26:46:c3:13:29:5c:fe:fa:80:c0:97:a5:3c:1f:
                    c5:de:be:73:52:c8:97:2c:a3:80:6f:c0:64:47:92:
                    ff:7c:17:49:4e:57:ff:69:0a:ba:23:33:53:9e:6d:
                    66:f0:d4:7b:fb:75:4f:12:50:fe:45:28:43:43:93:
                    09:66:35:8f:85:fe:c4:08:0c:11:98:3a:e5:a1:35:
                    36:59:0b:2e:92:1f:85:27:a2:64:f1:39:15:a3:07:
                    0b:b2:23:ee:72:04:87:9c:27:1c:26:68:18:1a:05:
                    46:97:d8:c4:c1:aa:ce:11:6e:49:3b:68:eb:0c:39:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:74:DD:39:CE:42:55:5E:BD:FC:6D:EE:65:88:07:B5:27:74:82:7F
            X509v3 Authority Key Identifier:
                keyid:17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:8d:c3:24:54:45:89:09:9f:e4:89:5a:45:81:3d:9a:37:
         91:33:65:91:41:bb:2b:3c:47:11:56:89:2d:c6:ec:ae:a9:09:
         f2:1c:bb:c9:87:6e:04:f2:2b:44:0c:2b:4b:a6:1e:57:df:47:
         bd:d4:ba:31:2f:58:3d:3b:1e:f7:f6:00:60:01:a1:52:76:6b:
         aa:72:ef:da:76:11:da:17:5e:28:d5:ad:e7:6a:4a:ed:33:39:
         54:4f:7f:14:02:7b:14:0a:c0:0d:3f:1f:13:71:16:ff:5f:c6:
         af:80:90:53:ad:57:57:a2:ba:e4:11:2f:cf:dc:6b:67:88:4e:
         cc:8c:8a:d6:94:53:c6:58:8f:9c:b3:6d:44:7e:b0:38:68:5e:
         2d:24:5f:c0:97:2f:16:34:b3:8a:0d:4a:64:cc:1b:ae:b8:98:
         6a:8e:a5:b6:f6:96:38:eb:12:7b:b8:b1:39:f3:7b:ab:32:71:
         6d:e3:6f:8f:57:34:4e:ac:34:d5:80:23:d4:db:1c:19:52:83:
         0b:39:cd:f9:a8:bc:fb:1f:ab:e5:71:d7:da:f3:f1:b0:58:05:
         6f:09:9c:c5:51:2b:19:64:ec:ae:f9:36:02:6e:4e:d5:ba:69:
         60:89:b2:e3:bd:23:83:0f:8e:73:d9:18:ff:47:60:fa:39:c8:
         41:4a:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----