Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File:                     8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier:          tQoCQnzeBRCbgDRqhD+qOJ/nnHegvbViIQhC3zI7TWg=
Subject key identifier:   62:E7:1C:39:24:3B:D0:A7:09:54:14:73:22:AA:4F:31:42:E3:83:99
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer:       /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial:       01962E98656F3E3E77CE4175E5539CB6FF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: 20YO8ZdnbiSWxEsU0fw3hOgE9pN0v8kKXe0mUmhn9ec=)
                          2: fS7ilcusBx7RbV5l98s5It9Po4c.roa (hash: +tzJ2xKk0Wh2nHt9C5QqjNQ/SNVB0Rw0vsX3jkZV7rE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:65:6f:3e:3e:77:ce:41:75:e5:53:9c:b6:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=62e71c39243bd0a70954147322aa4f3142e38399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:b8:77:11:4b:94:25:f1:25:62:21:a5:37:
                    42:dd:58:43:0c:60:66:65:2c:e2:e4:3c:ce:03:72:
                    81:df:e4:11:d3:d3:45:9e:00:03:ac:17:6d:35:39:
                    f4:4f:db:0e:55:e4:cb:3b:b2:80:a8:71:a7:bf:a6:
                    43:ed:73:77:b0:40:f3:99:06:5f:71:9c:d2:f4:6b:
                    83:0a:6c:a1:8f:86:38:0f:0b:37:6a:ff:2f:ba:0f:
                    62:4b:06:06:2a:36:af:05:2c:27:8d:eb:cb:be:61:
                    22:b0:42:b7:1f:ad:67:be:e5:0a:49:b9:36:1f:c9:
                    75:62:62:e6:bd:26:2c:38:97:da:c7:db:99:ad:77:
                    45:c1:a8:50:dd:3b:9b:d7:7d:b0:c6:42:61:7b:61:
                    8f:d3:3f:23:07:91:00:e4:26:9e:0a:a8:42:71:04:
                    91:79:0a:11:01:69:73:83:7a:3e:fc:be:ad:09:13:
                    c7:ac:63:f8:d3:ed:9b:1f:a8:f0:08:1a:a0:c5:c7:
                    ec:7b:e8:1a:88:0e:9a:ab:d7:75:91:0d:2d:aa:50:
                    c0:e5:51:0a:81:e5:de:98:a9:0e:63:5b:08:f7:34:
                    28:ec:b4:9d:f5:c5:c1:98:82:81:cb:a6:ea:83:a1:
                    1d:4f:31:bf:82:56:9f:ff:b7:90:80:ff:3a:93:bd:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E7:1C:39:24:3B:D0:A7:09:54:14:73:22:AA:4F:31:42:E3:83:99
            X509v3 Authority Key Identifier:
                keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:a3:2a:f7:d3:d0:85:1b:08:86:75:58:4b:cc:6c:ea:21:
         02:3f:20:37:d6:eb:8d:7f:91:e2:73:d6:a0:60:cb:b6:3b:1f:
         fd:fe:ce:ea:19:ce:e4:6e:3a:fb:d3:74:d8:ba:26:ae:d4:bd:
         5e:eb:70:26:b0:c5:23:cb:ef:58:c5:ac:96:04:1a:3e:fd:f1:
         a7:b9:05:09:2f:7d:00:19:27:55:ef:30:e9:c2:7b:17:97:f0:
         51:2d:03:27:32:1a:0c:28:fd:14:4c:a1:54:0c:6b:79:8e:2a:
         be:b9:19:5b:e1:de:ce:9d:6c:04:27:0b:33:ea:a0:92:85:01:
         52:72:3d:3f:5b:da:1c:40:7b:56:bb:17:14:de:cd:ab:32:53:
         73:96:7b:8e:14:b1:68:66:84:ca:45:a7:d0:53:5a:46:ec:cc:
         b0:87:7d:c8:4f:a4:08:0c:ad:2d:1c:f3:90:77:83:c5:d7:ab:
         06:f1:a1:40:a3:9e:8d:29:f2:af:8c:de:be:fd:eb:d4:31:d7:
         85:d2:14:5c:30:a0:c8:11:69:e0:cc:88:56:47:fa:b6:6c:44:
         47:84:5b:d5:f4:13:a2:98:d4:52:8a:e0:8a:05:51:cd:ce:ae:
         ad:1b:ec:26:38:47:4d:52:f8:1c:4b:a2:26:88:4a:45:6d:69:
         8d:8a:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----