Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          yIZ5n/imkVbC3uUeQzwatS08cQZay/amQGxBO3AyqO0=
Subject key identifier:   4F:AD:8B:19:A7:7F:0C:08:AB:E2:1D:8A:44:84:18:98:CA:C8:0C:3B
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       01962F0677CD691F9EF7AB6328531C1EC76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          101D
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: dbgmtBZU5XkG6hf758XBuHcIIh0KV5m4eN+SFtar+zM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:cd:69:1f:9e:f7:ab:63:28:53:1c:1e:c7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=4fad8b19a77f0c08abe21d8a44841898cac80c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:b5:89:93:b8:28:f7:84:8b:25:e6:e9:1b:
                    1a:66:a4:61:89:32:ee:1c:43:9b:72:14:55:59:50:
                    eb:66:f8:e1:b3:3d:78:9a:b8:9d:6f:b9:57:37:42:
                    2e:a8:58:25:3d:b0:7b:f6:f6:9b:64:90:ee:6a:3b:
                    b5:90:66:b2:50:da:4b:90:be:c8:af:b0:19:07:dc:
                    1e:13:49:21:d3:78:9e:a9:b3:b4:69:fe:42:be:60:
                    a2:da:82:1a:f9:f8:4f:b9:dd:a6:e1:9b:09:ec:5f:
                    c6:57:6b:6b:f4:0a:21:63:9f:48:87:8d:61:b0:b2:
                    72:e6:42:96:8a:5f:ee:bf:03:b0:a8:c9:d3:c4:ee:
                    a0:4c:0f:56:ba:a3:57:48:59:bf:d7:ad:37:ae:a4:
                    37:d4:2a:c3:cc:84:49:3f:eb:61:6c:bb:88:81:a4:
                    66:a4:6e:c7:ab:db:88:26:46:49:34:11:bc:45:16:
                    0d:70:0c:36:69:df:3b:d8:6f:12:db:b5:2f:d6:0c:
                    7d:d4:76:87:82:51:af:95:f9:91:ff:76:f1:18:06:
                    64:43:12:7d:f8:94:07:ae:52:34:c5:be:9e:b9:23:
                    b7:54:16:ed:b3:dd:9a:7f:10:e9:5b:f2:43:cd:04:
                    f5:ac:31:cf:37:91:a0:c8:8d:ef:f8:1c:0c:31:ac:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:8B:19:A7:7F:0C:08:AB:E2:1D:8A:44:84:18:98:CA:C8:0C:3B
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:be:aa:37:c6:7d:05:81:da:30:aa:98:e3:1c:91:57:c8:e3:
         83:cd:b8:e5:e6:bf:13:a0:4f:5b:c2:04:ad:07:86:60:09:ea:
         4a:e0:37:b5:63:fb:48:29:82:60:83:42:23:d0:4d:31:74:8b:
         25:71:b9:4c:2e:00:28:33:67:c7:89:d7:66:43:fe:f9:15:02:
         98:99:b9:c3:97:79:42:67:6c:4f:01:fd:c9:b1:98:96:ec:14:
         8a:f8:7d:64:c4:0d:7c:75:6f:80:82:82:04:d4:11:2f:0f:06:
         e8:40:03:a0:ff:13:c1:6a:2b:20:f1:95:be:66:8f:ea:07:0c:
         c0:34:e5:bc:75:e0:de:fc:34:64:f4:4b:b9:a9:81:72:a1:6e:
         e1:92:96:b9:74:32:ea:a4:c7:21:2a:bb:c8:b5:72:a8:c3:c6:
         7f:33:06:8e:6d:fd:5a:20:ee:9f:39:77:b0:54:ba:1b:74:5a:
         f6:d4:6d:87:d1:93:b8:84:76:ea:fb:e6:48:e4:b1:2e:ce:15:
         84:65:1e:e7:7d:3e:3e:51:e6:45:19:51:87:15:b2:7a:44:2a:
         eb:b0:2d:f4:bf:0c:16:16:48:bf:c2:b3:62:00:78:5b:74:88:
         fe:b7:19:6b:46:82:48:04:42:69:17:e5:81:86:e2:94:69:3e:
         e0:e4:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----