Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File:                     FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier:          W5PuAshF3WLuJ/Xz5yoQoiafllX/1SCTW/VRAOJJ3C8=
Subject key identifier:   E2:36:81:79:AA:00:04:F5:87:B3:E0:82:CD:0A:82:80:39:A0:63:0F
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer:       /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial:       01962F066DF13F17EC8D7D3F9722BB13DBB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number:          0FF0
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: aG48NV3vmiKm5tR472kP9jPi7P1MKBGZoCZf9pUCxEs=)
                          2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:f1:3f:17:ec:8d:7d:3f:97:22:bb:13:db:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=e2368179aa0004f587b3e082cd0a828039a0630f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:44:17:c3:67:08:ae:d3:eb:e9:63:d5:f1:
                    24:89:8b:e4:27:98:4b:c7:54:de:d6:a7:08:f7:75:
                    cd:e8:37:ca:25:69:c7:93:24:91:28:ba:58:62:63:
                    3a:6a:b3:68:42:5f:8f:a8:5e:dd:3a:14:5d:49:20:
                    a6:bc:19:17:8a:9f:bb:48:c3:a2:51:e8:29:55:9d:
                    40:bb:f0:d8:b0:eb:5c:ff:be:02:58:5c:73:bc:a2:
                    3b:a4:bd:c1:19:ed:77:44:b1:1d:8b:46:1d:0d:d6:
                    58:da:17:84:4b:6e:b5:47:1e:b7:60:52:1b:2c:11:
                    7c:9d:2f:1d:f3:da:cd:63:09:25:42:68:fc:2d:f2:
                    80:eb:e3:a8:a5:98:16:97:2d:84:9e:73:25:0a:32:
                    fa:b2:9f:ad:aa:57:06:93:95:95:cc:f1:cb:a0:91:
                    f0:56:4b:d4:d5:1d:ef:54:7c:35:34:7a:7a:6d:9f:
                    34:04:61:78:57:be:b3:9f:be:d8:c6:7d:39:98:25:
                    5b:df:ed:d8:a1:2c:64:aa:a3:9e:0a:c8:65:fd:06:
                    fa:6b:fe:84:87:d4:c1:e4:37:27:e9:24:01:78:df:
                    1d:85:d5:d8:ba:4e:e8:3b:4a:d0:5a:b3:3b:86:be:
                    23:b2:b6:6e:27:81:49:f6:cd:54:b4:53:2f:f9:94:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:36:81:79:AA:00:04:F5:87:B3:E0:82:CD:0A:82:80:39:A0:63:0F
            X509v3 Authority Key Identifier:
                keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:8b:a7:28:1f:4a:5a:f1:ef:c0:b8:4b:f0:a6:32:ad:f5:
         db:73:5a:00:58:ae:b1:c2:34:d2:ee:95:99:a1:a3:c2:05:58:
         41:d9:02:74:05:4c:f5:13:a7:e1:73:16:84:47:b3:c1:5a:45:
         b7:0f:70:ab:b2:2e:7e:27:c8:19:e1:f4:79:86:68:9e:89:37:
         c6:d4:ce:8a:24:ab:a7:75:91:54:d9:59:f5:d8:6c:3c:25:1c:
         41:06:2d:3a:48:4c:79:6d:67:63:35:83:fc:59:e4:3d:1c:c9:
         76:58:92:33:1f:00:60:1c:55:a6:5f:c8:5a:44:db:79:83:bf:
         a7:7f:bf:7d:91:cd:25:93:3b:da:1b:b4:eb:5a:13:77:4b:27:
         98:7c:4e:2e:ac:70:37:f5:60:4e:a9:26:60:80:0f:e9:4a:18:
         1f:3d:94:c2:fb:ea:f7:94:cb:38:88:e9:f8:40:6a:10:76:fd:
         06:9d:bd:d1:1f:39:c3:00:df:b3:3e:b2:90:a4:a5:27:f2:ee:
         53:95:c7:43:d5:d3:d9:7a:23:79:96:f7:a4:50:d6:b1:02:39:
         38:10:7e:ed:a1:53:85:fc:0b:83:9d:ae:ff:e3:ea:5c:66:cc:
         28:e3:65:ec:23:43:75:9f:41:f9:f3:83:74:0e:82:95:90:1f:
         3c:1c:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----