Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File:                     18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier:          0UsAJWs8UNghQPmsfEVqQROQTDGpKgRjG/KRW2K446g=
Subject key identifier:   15:82:F4:50:38:AE:C1:06:B9:75:38:17:84:48:0E:A6:F8:76:52:A2
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       01962E61A05C8096AA7AF3AD1772636C0DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: Z9sQyYOl5gjdT1zU7JLLiYZe9wrLaSvyo+kQy6NZUDo=)
                          2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a0:5c:80:96:aa:7a:f3:ad:17:72:63:6c:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=1582f45038aec106b975381784480ea6f87652a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:38:61:c1:ce:6a:72:08:55:ca:e5:3d:ea:
                    32:20:96:e6:5d:3b:09:7f:e7:40:0b:40:cd:8b:a7:
                    41:5a:84:de:42:92:cf:d8:8a:70:8a:0f:e3:c6:e7:
                    eb:db:3d:d1:b0:c5:f4:94:6c:43:73:d4:be:cc:81:
                    82:15:3b:0f:02:06:20:50:d4:59:ac:5a:8d:77:53:
                    e8:67:a2:f2:4b:ce:67:bc:52:28:f0:34:6a:2a:ae:
                    96:92:f9:b7:eb:89:f5:12:42:8a:da:55:6b:cd:03:
                    bc:79:40:32:be:d1:3d:d0:69:d6:dd:4b:22:97:f3:
                    f2:6a:58:cf:24:83:a0:c5:46:d7:73:46:14:ea:11:
                    f4:c3:b0:4c:22:2e:24:74:30:a4:32:63:87:a0:fc:
                    7d:41:bd:52:8e:fb:f3:c7:2e:fd:65:d4:a0:f6:9d:
                    4a:25:05:94:93:51:12:86:e2:0e:e9:66:4e:42:e0:
                    04:d3:1c:69:2c:b7:ce:d7:99:c4:0a:b8:51:95:cf:
                    99:87:24:83:29:8d:a0:52:79:9b:db:9d:02:8a:04:
                    c7:fa:c3:b9:a6:a0:1d:7d:57:df:a0:8f:70:16:5a:
                    9b:53:e4:e1:b7:66:cb:56:20:ac:27:f1:f1:00:66:
                    4a:41:1f:65:44:11:51:18:0d:e6:57:95:22:70:ed:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:82:F4:50:38:AE:C1:06:B9:75:38:17:84:48:0E:A6:F8:76:52:A2
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:e7:17:82:69:84:4f:92:3a:42:ef:58:b8:fb:98:2c:14:
         7c:6e:06:c8:36:a7:55:dc:c5:b7:54:5c:1b:48:29:0a:4a:51:
         a0:d6:3d:52:07:2d:81:2a:1c:3a:d1:82:ae:08:1d:9b:d7:79:
         12:91:dd:92:23:51:ee:76:be:79:15:d9:ca:12:21:32:db:42:
         80:ca:f8:d5:c3:f8:2e:d8:b3:0c:bc:9d:70:22:ee:e5:38:a5:
         10:8e:8d:81:2a:0f:10:1e:dc:44:e5:87:7a:05:e3:5e:57:e4:
         32:c3:db:ac:01:01:3c:99:08:6f:a7:e8:b5:56:f6:47:a0:04:
         67:1f:71:8c:0d:c6:93:0d:c4:9d:c5:54:21:09:39:f0:95:ac:
         ec:e3:4a:2e:c5:d4:fd:de:81:97:04:d1:1c:19:8d:50:82:8f:
         23:bc:00:83:63:7a:02:f0:e5:28:55:d3:ac:44:d1:b5:2b:fa:
         b7:f8:45:62:73:da:4c:c8:6c:9e:ba:3f:dc:29:17:c7:6a:45:
         5c:fa:53:4c:03:d2:aa:63:f0:ef:bf:cc:ce:e5:62:bc:fc:da:
         20:20:d0:54:fd:0c:e9:00:69:97:25:1e:90:38:a6:d5:72:4c:
         1b:e3:67:a9:da:fc:b0:52:a4:49:07:cb:83:d0:86:34:2b:e5:
         b2:bf:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----