Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File:                     fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier:          t3Kvpkj9WdLYRCMe8LpMRMScqqLHMGnwS3JxghEaG44=
Subject key identifier:   DF:7D:70:04:82:34:55:C0:DD:01:95:72:23:E5:BE:AD:BA:F8:2E:63
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer:       /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial:       01962E98A6076ACAA4528C28F5A803450D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: Hy1lm9DaBowseIyaY81QfPnrd2BDl2IXemBRm+LZdY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:07:6a:ca:a4:52:8c:28:f5:a8:03:45:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=df7d7004823455c0dd01957223e5beadbaf82e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:1e:5e:84:50:3c:f5:07:5e:a0:d3:ca:51:
                    b7:95:a7:a9:d1:f3:a7:d1:55:20:78:c2:e2:a3:e6:
                    3d:bb:0e:40:94:83:1e:ed:48:d5:24:44:d9:ab:1f:
                    bb:6e:41:5b:10:0f:8b:94:76:ae:30:07:5e:52:98:
                    61:ff:b4:5a:7f:f9:ae:48:fb:a0:08:2e:51:7c:40:
                    24:76:23:ce:29:53:6e:90:b7:4f:a9:9c:ea:0f:51:
                    c3:ac:bf:c6:03:16:49:23:93:52:d3:61:58:84:6a:
                    2e:74:1b:09:f3:f2:d3:74:97:d7:da:ab:60:e5:c6:
                    2b:64:30:bf:12:6e:14:e2:4f:ae:85:4d:60:7a:a6:
                    3f:aa:d3:11:b9:c9:5b:4a:49:10:58:db:ac:b2:a1:
                    53:39:85:d4:f1:fc:0d:f7:db:70:18:25:63:63:59:
                    b8:26:0c:3f:0a:02:13:73:ae:e7:74:6e:40:e8:bf:
                    e1:f4:44:f0:5f:67:10:1a:e8:ea:46:ba:14:04:a2:
                    ea:23:a0:ff:11:3f:93:8b:07:51:43:9b:1a:18:f2:
                    1a:4f:f7:20:4a:b8:0b:ae:3c:05:9b:04:cc:04:ff:
                    3b:b7:31:0f:1d:a1:37:9f:8d:d8:a8:0a:5c:f4:88:
                    68:6f:11:5a:fb:00:3f:1a:f2:7c:49:9c:91:94:a6:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:70:04:82:34:55:C0:DD:01:95:72:23:E5:BE:AD:BA:F8:2E:63
            X509v3 Authority Key Identifier:
                keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:bd:b9:78:c9:84:ec:55:8d:b4:e5:cf:c3:2f:d3:15:a3:
         0d:f5:55:b6:57:61:42:b7:e1:7c:2d:92:8c:6b:df:04:3a:d1:
         a4:f9:6a:a3:36:8f:50:29:47:e0:f9:6a:87:d0:d0:fd:91:92:
         65:ed:f6:90:f3:17:08:b1:47:2f:d2:59:58:d1:79:99:bd:32:
         91:78:26:79:b7:aa:6b:66:c0:a0:29:33:44:8b:1b:b9:a7:6e:
         17:5d:4c:72:df:fc:5b:b8:16:b4:4a:14:da:ae:89:c9:4d:7d:
         be:ab:66:cd:9f:b3:ba:48:6c:77:42:f9:66:24:5b:b0:99:03:
         1a:e1:3e:0f:91:77:63:f8:ec:8f:30:65:0b:12:88:2d:93:55:
         6c:65:39:75:ae:a4:ce:f9:40:06:07:94:05:a0:35:26:e7:86:
         50:ce:22:f6:89:e6:4e:a3:3c:31:ca:75:c5:27:55:15:31:ea:
         3c:af:64:9a:62:94:b7:81:5f:12:18:e1:97:08:a0:bb:5b:19:
         ff:c6:ea:d4:13:3f:b6:9d:c9:de:34:14:97:2a:36:d5:65:c5:
         a0:17:71:87:e6:a2:dd:b2:23:8a:bf:2b:bf:34:c6:30:3c:dd:
         bf:11:e3:2f:6e:ec:d6:77:68:de:df:37:c5:78:24:30:81:99:
         f9:c5:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----