Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          Hmrpa9J61q8L4MWhXCIbQc26jbiTO08a5zP06mea2Tg=
Subject key identifier:   4E:B2:3E:7C:D6:97:39:93:73:AE:7D:E1:A2:10:BA:26:54:B1:23:81
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       01962ECF7412051C9ADCFC3D519192475B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: FoZ8X7zZ8qKu7lCJIlNfbxDtemYLxzlp/Vols7JqYaA=)
                          2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:12:05:1c:9a:dc:fc:3d:51:91:92:47:5b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=4eb23e7cd697399373ae7de1a210ba2654b12381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:9f:9f:36:48:ad:4d:ef:1c:fa:3b:92:9d:
                    16:b4:a7:08:c7:7d:ec:2f:28:20:48:cb:d0:73:22:
                    46:53:50:c1:49:60:93:d7:4b:26:c6:b1:e5:63:04:
                    ec:5a:bc:b9:34:ed:35:b1:ad:ec:8e:44:6c:7b:f2:
                    39:a8:e8:97:2f:fc:a5:1a:3d:bd:da:53:7e:a2:d2:
                    ac:2f:c5:94:d8:f4:3a:06:c6:d7:ce:0a:7e:e1:3e:
                    09:11:80:1b:a0:2f:e1:a3:9e:b7:74:16:8e:b4:13:
                    94:be:ff:fe:6d:f7:bc:89:e3:c8:8a:d5:48:65:38:
                    be:95:3d:f9:fb:d0:e8:fe:57:f7:11:21:09:44:57:
                    02:6e:4e:57:d1:09:fb:c8:41:c9:2c:9c:18:ab:4a:
                    97:61:b4:f0:8a:77:c4:a3:22:d4:68:52:b8:d0:5f:
                    2b:e9:06:d0:c2:c2:0b:89:e6:50:be:62:05:38:b9:
                    1d:eb:6a:9b:e0:e4:21:61:88:7f:82:6a:75:2c:1b:
                    99:60:48:a2:ee:f4:b4:fa:7a:0f:02:eb:c6:32:03:
                    a0:c1:ab:7f:26:56:68:ac:31:3b:91:64:4c:1f:d4:
                    56:34:35:dd:e9:30:5c:d9:6c:78:da:c4:67:f9:04:
                    a7:bb:ae:25:6a:7f:eb:e3:01:21:a8:24:74:c2:ad:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B2:3E:7C:D6:97:39:93:73:AE:7D:E1:A2:10:BA:26:54:B1:23:81
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:69:90:9a:d4:71:61:94:c3:3b:76:36:07:0a:b2:6c:18:b8:
         2f:3c:f7:8b:ec:72:8d:61:2e:9f:38:f8:d3:98:72:4f:5a:7d:
         19:5b:fa:86:11:8b:ac:cf:49:52:7b:1c:4b:a3:ee:19:b7:b1:
         11:4f:6c:64:64:42:c6:5a:07:f1:79:67:62:a8:2e:f4:de:86:
         89:4e:e2:ed:80:ba:e5:db:de:10:6f:9c:30:38:ed:33:58:3c:
         89:7a:3f:86:62:ef:d1:0a:4c:d6:81:c3:0c:ee:7c:19:ec:cb:
         47:56:19:67:d5:a1:6c:93:e7:a6:f8:25:06:b9:de:94:89:e7:
         ff:92:1d:89:41:d5:a1:b7:ba:f3:b1:79:ea:09:0e:7f:a5:f8:
         7b:96:0c:9b:ec:8d:74:47:53:17:81:94:b9:9e:7c:8f:4c:be:
         e2:2b:56:e0:5d:f7:c1:20:9b:2f:71:b8:ae:3b:ef:12:7e:87:
         5d:59:17:17:91:5e:6d:cf:fc:fe:b3:0f:10:4d:4f:12:e1:92:
         06:43:a3:e2:6e:9b:9f:c9:b4:b2:0e:a5:b0:af:f1:d0:32:c8:
         54:ee:f0:29:91:54:60:94:c2:19:0c:e6:55:ee:50:50:43:50:
         be:54:20:b7:50:c6:89:91:57:8c:63:83:49:98:1c:c3:ef:08:
         9b:3d:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----