Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File:                     1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier:          eFNsYCet4FdpyuOk4Wl3qmEg6sfj9bwbIuI/rXQ3zFo=
Subject key identifier:   21:57:97:DA:F7:94:19:58:9D:AC:DF:77:08:92:CA:FF:74:A2:C1:DD
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer:       /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial:       01962DF44CC22D8DF962D7FE980A08498293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number:          FA
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: vknRzn8jotHtHrS7+c2GCMJaqoVo9bqI6cG8EP8j4IE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:c2:2d:8d:f9:62:d7:fe:98:0a:08:49:82:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=215797daf79419589dacdf770892caff74a2c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:99:33:ae:2a:6a:a3:87:3c:da:9f:b2:fe:
                    76:ca:c1:2e:c7:06:58:f5:e6:3b:0a:8b:41:5b:c4:
                    de:4e:91:ef:fe:88:10:57:e1:2c:4d:22:51:c5:1a:
                    0a:c3:86:d3:ed:72:88:63:96:d8:5f:0f:07:34:9f:
                    75:1f:bb:ee:0b:0d:80:db:18:8b:79:c9:6b:27:5b:
                    bd:1a:6c:b9:4e:14:16:9f:a6:6b:04:ce:6d:83:ae:
                    35:58:b5:d6:f9:91:dd:2f:09:ae:2e:3d:ed:fa:c2:
                    09:87:e6:4c:02:42:d5:a9:ad:65:46:9e:d2:d6:ba:
                    96:c9:32:b7:6e:bc:c5:ca:a4:a3:5c:67:ae:19:18:
                    64:3f:e7:7a:2f:9e:94:24:bc:a2:99:7a:1a:00:7b:
                    f5:11:01:bd:42:d3:08:67:ff:6e:d0:96:4a:38:d6:
                    e6:42:3c:1b:ec:d0:4b:29:1d:5d:10:95:7b:76:91:
                    98:3b:bc:b9:c0:85:55:54:24:ca:16:c2:bc:ae:dc:
                    53:82:fa:7f:dc:90:26:01:a6:6d:d5:e9:9b:c6:f7:
                    4f:bc:9b:2f:85:fe:9e:73:d0:8f:3d:fe:2c:64:14:
                    4b:eb:93:2d:a5:4a:15:0c:c0:9e:5b:0d:99:1f:b9:
                    44:7f:8f:f2:3c:88:e6:c4:ab:e5:15:02:87:fb:fa:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:57:97:DA:F7:94:19:58:9D:AC:DF:77:08:92:CA:FF:74:A2:C1:DD
            X509v3 Authority Key Identifier:
                keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:92:9a:85:77:72:76:ec:7a:a2:9a:3a:11:9a:22:7f:11:1d:
         85:53:5a:28:88:ae:8d:61:dc:14:66:2a:83:d2:dd:0a:f2:e6:
         41:5a:63:e8:33:ba:6e:5b:ca:aa:d0:0c:39:ed:7e:02:48:f3:
         42:3b:81:4b:5d:f6:1f:69:e6:a5:05:a2:d5:2a:3b:85:1d:42:
         fd:bd:a9:f3:41:81:f5:7a:ad:7a:ec:75:95:76:69:a9:d2:4f:
         61:04:8a:df:da:10:78:c5:90:3b:b6:94:c0:fc:84:11:01:9b:
         72:2d:f8:bb:83:1d:34:a8:c1:83:ca:19:34:95:a1:0b:54:8f:
         14:a3:88:d6:17:f2:9b:21:98:0c:eb:0d:92:60:c8:aa:91:07:
         27:21:76:22:68:df:99:24:5f:8c:22:fb:81:c5:30:c5:d6:e7:
         0a:99:b8:5c:e7:ff:f0:c9:83:14:fc:72:62:62:8a:cb:be:5f:
         e4:3d:04:e2:91:4f:26:93:e2:27:4c:d8:0d:d7:0c:6c:2b:47:
         0f:7e:d6:81:71:33:42:7a:c7:39:87:d5:36:c6:f4:88:31:e8:
         33:92:96:44:17:25:e8:c0:a8:37:ad:27:2b:b5:cd:5e:60:e9:
         6a:04:a9:b9:06:f4:d4:c7:fd:b9:59:41:8f:8e:a3:5e:4a:75:
         97:a4:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----