Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File:                     fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier:          45ea/KJmjyV1VgP3TKpnlGsJ8AJ+dATqbWLSos5m86o=
Subject key identifier:   AC:D1:3F:81:28:12:6B:5A:E9:D6:12:31:27:8F:C6:A4:BE:C7:EE:05
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer:       /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial:       01962E2B29909E8BC3CFAA9C1CED9722A470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
                          2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: bahRssu/P9p4070MVuWBVpXZ32kUMla/GicqHkJxVKU=)
                          3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:90:9e:8b:c3:cf:aa:9c:1c:ed:97:22:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=acd13f8128126b5ae9d61231278fc6a4bec7ee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:54:0b:f6:73:9c:25:ea:f2:75:64:09:ba:
                    dc:9f:f1:eb:ea:97:27:e8:ef:3a:d8:86:e4:2f:5e:
                    bc:54:13:57:67:32:48:be:aa:86:8e:91:5a:80:e2:
                    63:f8:a0:a5:ab:d6:a3:24:65:68:d3:37:da:8f:af:
                    3b:1c:11:79:db:ef:6c:5e:54:05:24:1b:01:97:e8:
                    a2:55:f0:54:87:02:6d:d7:d5:e6:bf:02:cc:9c:2c:
                    0b:d1:c0:d0:60:d6:67:aa:50:f6:5d:2b:91:a3:ac:
                    98:b2:53:fe:e4:ff:30:27:d1:b9:dc:8d:19:09:63:
                    29:cb:b1:63:5b:2a:51:c0:a1:e0:ff:d3:9f:00:26:
                    8d:87:f9:2e:d9:bf:b5:d5:71:42:dc:17:87:2b:97:
                    f5:57:79:07:ce:fc:66:28:d1:ea:46:66:75:63:bc:
                    30:b7:67:f4:46:01:43:4f:61:80:67:2f:66:8b:1a:
                    3a:a7:66:23:19:1e:76:a7:1b:89:b9:55:b3:db:15:
                    c4:0e:54:98:b9:73:bf:2a:08:22:d7:e2:2a:9f:71:
                    fa:0b:b2:a3:95:7f:06:88:95:3a:12:4d:2b:c7:4c:
                    66:d6:27:40:41:ed:e7:e5:16:1c:49:a6:f4:7a:79:
                    d9:0e:48:49:b2:11:22:1b:0a:a4:bd:82:8d:a0:56:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D1:3F:81:28:12:6B:5A:E9:D6:12:31:27:8F:C6:A4:BE:C7:EE:05
            X509v3 Authority Key Identifier:
                keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:ee:c1:6d:3f:90:4f:d7:87:63:58:03:91:94:af:b1:85:
         09:fd:ac:e3:3e:04:50:16:ab:25:62:a2:07:5a:9e:d0:41:f1:
         88:42:78:99:43:d8:47:01:5b:3b:82:b8:f3:91:77:24:0d:c4:
         89:b1:5e:75:b5:b9:3a:cf:c8:56:2d:6e:af:62:2d:6a:62:91:
         55:c6:bf:5e:65:46:8c:94:4f:31:60:12:ca:ae:06:e4:fb:57:
         5a:bb:fc:d0:95:46:89:43:3a:37:c8:07:dd:d1:ed:8d:56:09:
         88:13:45:1d:e4:3e:a9:d2:08:40:d4:15:18:b5:b9:11:99:49:
         b4:1b:a9:56:9d:16:02:96:80:02:b1:53:58:4c:e9:73:14:56:
         22:5b:94:06:f1:69:5f:23:d5:60:1c:91:0e:0c:fc:17:cb:f8:
         4d:7c:74:7b:40:33:c6:2b:cb:38:ba:96:c4:8f:7b:8c:64:90:
         3a:01:82:75:ae:0b:29:28:3b:1a:c7:c7:df:23:c0:50:b8:6d:
         c0:05:72:e3:31:cc:0e:ed:d6:b0:96:1c:6f:e4:69:5a:a0:c1:
         59:58:12:7e:09:1b:28:ae:47:ee:e0:72:72:06:96:a8:ca:30:
         83:d7:16:08:e4:e9:57:6b:36:8d:48:90:e1:5d:ee:9c:d1:a4:
         10:07:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----