Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File:                     SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier:          LiqaXfmqGp8DUpvkFZ5D6q80V67E9q8Qd08d0s1x+G4=
Subject key identifier:   66:90:F6:8E:65:F8:6B:00:FB:14:30:A8:2B:6B:9F:55:AF:8E:C0:DD
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer:       /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial:       01962DF3BF460A9972F9C05628DAA41D4C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number:          0847
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: ciO4UiWkBzJtRx0HTQ4ApjUUJvXYWvuAUb48lTQKLIw=)
                          2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bf:46:0a:99:72:f9:c0:56:28:da:a4:1d:4c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=6690f68e65f86b00fb1430a82b6b9f55af8ec0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:f8:3e:19:66:91:37:a5:cf:0d:ab:50:db:
                    ab:ef:63:31:37:b3:d6:bd:2b:62:e5:3d:ca:13:10:
                    b5:50:48:8d:b3:00:51:d9:c3:0f:85:3f:6c:e1:60:
                    72:02:db:f7:92:0e:3c:8b:c4:c9:d8:ad:1b:f3:c3:
                    24:50:85:76:fd:ad:12:5a:26:07:76:46:84:7c:96:
                    ed:49:29:c6:87:80:82:c2:e1:69:15:00:f1:9f:93:
                    a4:fc:85:23:5e:8a:22:ae:ba:d0:50:d9:ae:85:30:
                    bc:b9:f2:ee:ec:93:60:80:4b:7d:a0:c2:95:ca:99:
                    5f:c6:51:95:f7:80:73:a3:77:56:1a:00:c0:ad:7d:
                    88:7d:d6:4d:1c:20:08:12:3b:0c:6a:ba:27:32:66:
                    94:16:a0:5a:7c:ef:64:e4:62:0c:74:75:58:33:fa:
                    2a:0d:15:64:ec:55:1c:63:10:f6:41:cf:e2:8b:66:
                    fd:ac:14:97:23:3c:47:90:eb:ed:1e:8c:3e:6d:d9:
                    3c:fd:a5:52:77:d6:13:64:09:1b:a2:3d:cd:8c:10:
                    e6:6c:15:4f:8a:37:48:72:ff:d7:64:f9:57:8a:de:
                    e7:b3:79:63:c4:16:b8:a2:15:a3:96:36:bf:61:66:
                    40:08:45:76:58:f4:db:18:fa:60:ec:d4:88:08:3c:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:F6:8E:65:F8:6B:00:FB:14:30:A8:2B:6B:9F:55:AF:8E:C0:DD
            X509v3 Authority Key Identifier:
                keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:db:69:dd:17:4f:8c:98:f0:d8:3e:31:b3:b2:be:b0:a5:1c:
         9d:b1:bd:fb:0b:a3:ab:29:4f:91:f1:d5:dc:a3:d5:78:38:ce:
         7d:2f:7a:c6:ea:8f:3f:70:63:37:0f:63:3d:49:cd:c1:fa:3d:
         0a:37:af:58:31:06:42:c0:14:45:95:aa:28:df:6d:5a:bb:d8:
         d2:7f:9b:aa:5b:4f:6a:39:97:83:f9:2e:78:ae:52:65:2f:ec:
         cc:9e:c6:18:c2:22:02:ee:17:68:90:c1:a7:c6:0e:01:d4:cb:
         79:ec:63:ae:8c:90:e2:28:70:43:fe:07:c1:99:c9:66:4e:e9:
         7e:52:a1:84:96:5f:63:ac:90:2f:3e:48:ed:43:61:05:9d:6f:
         ca:0e:c6:e1:70:37:f4:8a:3c:07:08:74:b7:fc:33:41:32:ca:
         c3:6d:8d:e3:a2:0a:1e:84:b7:85:59:a6:69:46:38:ac:2a:22:
         36:70:00:ef:7c:bb:28:c3:5d:b3:40:e7:79:d8:1f:d3:73:2e:
         de:36:51:ca:f2:31:fb:eb:be:fb:c2:17:3a:96:fe:4e:93:f5:
         3b:ad:87:52:1b:0e:e2:44:72:cd:70:5c:40:ae:d7:cc:e6:30:
         08:9c:a5:5c:a9:da:bd:de:b4:b6:ac:39:81:44:b8:b9:7c:4d:
         bf:29:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----