Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          IUpFoI2zgx2BUY06ZxVjwzPfQ7e2ZWsS+6DKAOTYYuk=
Subject key identifier:   19:54:DB:F7:A0:EC:54:4F:A6:56:05:95:BF:D5:B2:F2:59:06:AD:C5
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       01962E99000685C1581D2655CBFF321C8BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          150C
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: HvQZ6V/jVjx1qgrZfYwbMfE469937lvqnOhZ/5JdiWo=)
                          2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:00:06:85:c1:58:1d:26:55:cb:ff:32:1c:8b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=1954dbf7a0ec544fa6560595bfd5b2f25906adc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:d9:59:d4:2b:52:ab:f7:43:e9:0e:0b:1f:
                    96:13:90:c6:5e:52:86:0c:c8:f1:42:9f:80:4e:ed:
                    96:a5:f6:4f:88:50:7e:1e:69:cd:31:ac:a4:d8:99:
                    6a:67:73:7e:a9:2f:ed:18:be:5c:58:07:83:b5:54:
                    ec:8a:ba:eb:89:f5:52:bf:5a:aa:e2:87:02:22:bc:
                    55:13:61:d4:ae:90:13:9e:34:98:1d:fb:2b:a9:4c:
                    75:f8:c6:f0:1a:2f:eb:21:02:7e:ab:fc:9a:b5:12:
                    84:66:79:9d:44:49:bb:7f:44:d3:ca:f5:f4:18:07:
                    48:00:85:96:df:a6:0b:35:de:70:6d:d5:09:2b:46:
                    7c:2e:e2:9f:22:48:62:56:26:36:cd:13:b2:e2:68:
                    f7:5e:a4:cb:27:ca:8a:4e:95:36:f6:1d:32:eb:84:
                    4f:0d:9f:0f:51:12:78:05:09:3e:a3:a3:13:45:da:
                    28:9d:45:d4:ff:69:fe:f6:f1:23:5d:89:73:78:16:
                    bf:dc:3f:aa:23:80:8a:e7:33:38:46:65:67:a8:54:
                    ed:22:10:fd:ae:88:cd:d7:0a:41:ce:b0:74:af:75:
                    7c:6e:bb:d6:b1:db:38:8b:fb:39:97:a3:9d:9b:f2:
                    8e:7e:2f:e9:95:53:b4:77:c3:b4:a1:c4:22:b8:68:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:DB:F7:A0:EC:54:4F:A6:56:05:95:BF:D5:B2:F2:59:06:AD:C5
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:bf:f0:43:fe:86:d7:d6:2b:54:87:0f:39:78:c7:b0:f4:
         15:72:5d:67:d7:c9:ab:c4:bb:9d:5e:2d:f1:d8:21:1c:0e:19:
         67:6d:ba:d0:e5:a3:ad:dc:93:0f:92:5b:82:1a:7c:d7:b4:97:
         ea:e5:20:70:a5:35:93:36:3b:44:18:fc:a7:f4:e2:09:41:fc:
         16:cb:e1:56:25:fb:64:e0:46:23:bb:81:7d:69:15:a2:ef:da:
         2a:76:ed:2a:d5:fe:29:3a:ad:4b:b3:c0:58:b4:1b:d2:57:d3:
         78:e2:4d:fc:4b:e0:fd:20:1d:c0:9f:d4:db:fa:22:86:3f:7d:
         a7:b8:0f:15:df:38:1d:f9:36:f1:62:5c:84:7c:14:aa:c2:71:
         16:ee:50:db:e2:6f:02:15:17:9a:a6:90:d3:f0:c9:c5:71:4f:
         f8:cf:8a:c5:ab:e8:ec:3b:a5:09:2d:24:6b:0b:56:b1:7a:5c:
         8e:0e:36:09:c2:9d:af:71:56:49:07:2d:85:dc:9f:17:1c:fe:
         2b:d0:66:8d:5c:d7:2e:3a:39:f1:0a:db:6e:ea:7c:a3:fc:7a:
         11:32:2b:30:63:6c:c0:48:96:cd:9e:5f:57:0b:b2:3a:4c:1d:
         c7:b4:95:57:ff:79:98:fb:ae:58:df:13:e9:49:cb:5d:c0:f4:
         cb:7f:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----