Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File:                     _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier:          EWVaTYtFmXhyGDfMNt2cm/maKP/LvC3Z9zxIs19w4eg=
Subject key identifier:   EE:70:2A:62:BE:A3:40:90:0B:8F:52:8A:9E:F1:D0:F8:DF:81:34:34
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer:       /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial:       01962ECF86772308CF4E7F65B761B57239F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number:          02FD
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: YN9zjqRHCTNtbIFU/CTdrKEEQIuPzasG5Xwn2cRtbU8=)
                          2: devZOEgryptZR-bT6KNMpTw3Mfc.roa (hash: u3HbxNlq49urjWUiGXoyu0fcegzQ7OgqdK+RiiJSzRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:77:23:08:cf:4e:7f:65:b7:61:b5:72:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=ee702a62bea340900b8f528a9ef1d0f8df813434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:cd:e9:80:db:f0:20:b4:8b:86:8e:43:3b:
                    c9:1d:2a:55:c4:3a:23:73:44:9b:da:df:00:0a:7e:
                    9f:54:d1:24:73:7d:5e:a2:7b:03:38:b8:1a:6e:aa:
                    8e:09:87:f0:41:42:5d:ed:0e:b3:17:aa:fe:27:65:
                    af:e7:d8:f5:8b:1d:20:fa:a6:2a:07:08:1b:05:8b:
                    99:1c:8d:03:b8:9f:8e:1c:0d:75:50:cf:04:f6:c6:
                    55:a4:99:3f:11:e6:a2:56:cc:e8:69:f1:e3:88:ad:
                    c7:03:6e:88:b0:10:a6:c3:63:cb:e1:3d:20:4c:51:
                    e8:59:af:a2:f0:80:7c:4a:2a:95:db:3a:e8:10:fc:
                    29:28:49:d7:c7:b8:a3:a4:8c:59:c5:18:45:22:4f:
                    39:f5:ce:e3:22:dc:b2:88:e6:80:6e:9a:6f:0d:94:
                    6e:a6:8b:ef:1d:5d:da:fc:97:a4:17:88:aa:e8:f7:
                    6c:8d:9b:e8:f5:ef:af:29:ed:a6:97:c2:c5:13:f0:
                    93:f2:89:95:99:01:69:b5:60:7b:67:a9:fd:a9:0c:
                    56:a9:9e:9d:b3:8a:44:eb:76:27:a5:82:33:da:d9:
                    03:03:ec:bb:8a:50:ed:bf:8b:3c:d8:cd:98:42:cb:
                    0c:c7:8d:bb:cf:01:71:5b:8c:af:2e:2b:5b:5d:53:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:2A:62:BE:A3:40:90:0B:8F:52:8A:9E:F1:D0:F8:DF:81:34:34
            X509v3 Authority Key Identifier:
                keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:ea:a9:91:92:04:b2:ff:c2:8a:5b:ba:8e:68:b1:f3:e5:
         9c:55:21:57:d2:aa:f7:8b:19:42:b1:49:8d:81:60:27:d9:96:
         41:bf:45:00:a2:23:12:b8:7b:23:50:88:27:33:4d:6d:8e:e3:
         47:45:b9:fc:90:4d:a0:d9:92:5d:99:a6:8b:3c:f7:b0:55:e2:
         f0:e6:e8:1b:3f:ef:7e:49:f5:7a:d8:06:8a:60:2b:b1:dd:30:
         ab:e6:db:9f:ba:85:13:9b:27:13:eb:a5:b2:2d:a3:7d:84:25:
         37:dc:61:c0:93:42:97:fe:26:8a:81:7d:f9:00:2d:36:76:66:
         44:f1:cd:f5:17:9b:b7:22:85:27:a5:8a:80:91:e7:5b:17:53:
         4d:31:36:8a:5c:b8:10:b6:14:1c:d2:78:a0:71:d2:5c:7d:e2:
         74:89:b4:a5:4c:f1:d3:2b:07:26:95:31:5e:59:b4:5b:4d:21:
         3e:24:e6:60:9d:9a:33:f1:e4:0c:bb:3d:6e:40:3c:d0:4f:38:
         34:0c:f0:d8:2b:1e:6f:f8:9f:ac:73:66:08:e0:89:95:a9:91:
         b0:a9:38:37:5e:db:0d:95:4b:de:b3:1f:85:95:da:e6:0c:59:
         a3:28:60:32:b0:83:18:09:25:78:66:f1:68:d5:40:49:22:51:
         2d:4d:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----