Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          7aGkA80DA6tXnzda9iW4V1EjukoSntSeX7LYwl5uHBY=
Subject key identifier:   E1:7C:1B:50:B0:F8:93:C7:DA:91:11:15:96:F5:AF:9C:62:A2:D5:7B
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       01962FAB615C513F1ACD16285DA9EB570962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: 9MxHLwN1MTNcrSH48kVIqv2oP2V+/O7lcPZCjF8QMHs=)
                          2: HZJZK1LDGniWHSTreLFu2CqFoKw.roa (hash: 40ZMLNytGhjN7rMLqzH8llTGFye5F6mDvh5SBtZYngo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:5c:51:3f:1a:cd:16:28:5d:a9:eb:57:09:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=e17c1b50b0f893c7da91111596f5af9c62a2d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:72:97:30:e5:8e:8a:ff:06:15:12:18:99:
                    4a:be:c8:8b:3b:2a:06:d4:83:52:26:c0:6c:f0:a1:
                    04:8a:70:7c:84:40:13:60:0d:f6:46:8f:a2:33:f8:
                    6c:95:91:b8:4e:53:16:44:98:49:bf:0b:1c:b2:3e:
                    46:65:34:1f:86:5c:88:74:4c:d1:da:1a:29:c5:c7:
                    21:92:c3:1f:19:46:c8:69:26:1b:94:27:ce:72:9d:
                    b8:33:a6:cc:d9:d0:bd:81:58:5a:76:33:ac:7c:16:
                    e6:15:87:d3:ae:44:7d:9b:d8:34:48:d9:c2:69:c9:
                    a6:81:1a:1f:e1:86:6f:2d:24:f4:cc:cc:f2:28:c8:
                    73:c7:c6:cc:8a:1e:0f:8a:84:20:39:94:53:10:20:
                    ff:d5:3e:04:97:9f:c4:cf:cd:b1:fc:8c:87:33:8e:
                    6f:32:d5:3d:14:cc:53:f7:35:9d:1a:1c:8f:b2:ab:
                    3a:4c:df:20:05:e5:a3:c2:5e:91:c7:b3:54:59:28:
                    b8:1e:c4:8a:5b:92:99:03:25:ba:2e:ac:33:a0:1a:
                    d2:df:3d:94:e7:60:ee:80:03:6a:a8:cd:e4:74:88:
                    92:f9:dd:ad:af:d8:4b:e3:37:7b:3d:c4:06:8c:a1:
                    64:3c:62:cb:17:5c:ef:c8:b5:8b:a2:66:80:fe:e8:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7C:1B:50:B0:F8:93:C7:DA:91:11:15:96:F5:AF:9C:62:A2:D5:7B
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:7b:7c:52:98:15:31:3d:68:db:77:a1:f3:74:c6:dc:81:
         21:b4:86:49:87:8d:ee:46:61:ce:78:2e:c0:cb:72:af:3a:1a:
         5d:05:52:f2:ce:3b:30:7b:3c:53:97:59:cb:8d:58:c3:cc:fc:
         fd:39:32:d5:4d:cf:6b:98:74:38:64:58:9d:6f:00:6c:3f:6d:
         e7:78:f1:78:4d:30:e5:6a:e0:6d:a7:86:b9:3e:fd:85:ac:89:
         7a:0f:df:e6:0f:3c:9c:7c:71:29:63:4b:63:07:bb:c2:60:fe:
         76:0e:4b:c2:22:ff:7d:2f:e7:ce:5c:ae:b8:91:42:b5:90:6f:
         f2:cb:58:ae:63:02:4d:42:8c:a1:35:66:a9:a5:27:38:c4:d7:
         0c:80:8b:32:2b:68:fd:6e:f9:1e:48:41:bb:b2:91:b5:e6:79:
         aa:25:17:75:b5:6e:4f:8a:a6:b1:58:cf:06:da:8d:70:6f:32:
         2d:a9:f0:20:72:ce:9f:80:8f:ab:d9:9c:02:78:62:08:7b:ae:
         9f:9d:ee:b7:e8:ce:46:06:5c:f7:c6:77:38:01:bd:aa:aa:32:
         84:61:f7:e3:0f:77:7a:ee:df:26:87:b3:88:45:ec:52:3b:55:
         26:79:bd:3a:1c:aa:98:53:86:80:d3:bb:78:8b:d1:39:68:8d:
         1a:05:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----