Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File:                     _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier:          IOGDiozqgluN8YGgIi8ng9bg9UCSTsNjcsLf/eFVBfc=
Subject key identifier:   C3:17:DB:2F:42:80:B3:69:63:18:34:74:76:BA:03:AF:1B:41:79:CF
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer:       /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial:       01962ECFCE2BF33942D4E978CE42236F83DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
                          2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: rOjbmXzIbbjt10WB8GbXPsY6NsanByZyP4ROH72/tvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ce:2b:f3:39:42:d4:e9:78:ce:42:23:6f:83:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=c317db2f4280b3696318347476ba03af1b4179cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:dd:2b:e4:03:b7:c5:16:eb:f8:e7:52:11:
                    33:34:47:e5:41:51:01:0d:c6:6a:4a:63:44:b1:b0:
                    32:40:36:02:71:02:39:4c:6c:86:f6:fd:f5:2e:28:
                    55:92:1e:04:16:64:8d:64:78:4d:b6:5d:6c:b7:61:
                    33:ff:8e:9d:c0:60:e9:87:ca:f8:62:0c:2d:db:40:
                    65:e1:d3:7e:e8:bd:62:37:f9:5a:e0:7b:48:67:44:
                    ea:6d:5a:ed:7b:e2:ca:19:46:21:b2:9a:04:69:ba:
                    c7:52:47:d9:28:a8:97:a8:fc:41:60:18:95:33:91:
                    49:f4:bc:92:34:ac:fb:41:fa:64:11:a3:c4:b6:58:
                    cc:18:33:aa:56:9d:a6:30:2b:a0:43:a9:88:42:dd:
                    d9:c5:7d:86:b2:d2:08:e6:2b:18:51:eb:55:76:1c:
                    ff:ba:80:ef:8b:43:cb:e9:2d:3b:e1:70:47:85:87:
                    36:8e:55:18:ae:e7:79:95:e7:45:c8:de:89:cd:ef:
                    e5:5b:04:10:43:03:72:b6:0e:df:e8:33:fd:9b:57:
                    85:eb:1f:5a:5e:e6:0f:4c:c2:cc:40:61:84:c9:45:
                    b7:81:6e:35:2b:a4:79:82:04:3b:ba:ad:ee:be:b3:
                    86:fe:d1:f7:94:ef:10:a1:4f:86:cc:b2:8a:b1:02:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:17:DB:2F:42:80:B3:69:63:18:34:74:76:BA:03:AF:1B:41:79:CF
            X509v3 Authority Key Identifier:
                keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:25:e6:15:c6:83:c4:67:83:40:82:01:df:93:ec:a4:3c:
         30:55:db:e3:37:d9:38:1d:13:dd:ec:33:57:46:f8:22:ce:15:
         f6:b6:86:bd:d5:ec:04:f9:ee:d8:1b:82:93:79:82:6f:ab:e7:
         fc:da:52:19:30:77:ba:20:5a:ae:c5:42:b0:fd:e2:c6:2e:96:
         7b:0e:37:3e:73:8e:a9:19:3a:6c:1a:c2:f2:cb:bd:3a:0a:b2:
         04:bd:e6:3a:cd:3a:71:86:c6:0c:a3:1a:10:82:db:82:eb:41:
         98:36:67:c0:fd:70:0b:c7:f9:f5:e7:bc:a5:09:a4:e2:38:eb:
         b3:2a:8f:a4:0a:16:84:08:98:6d:d0:c0:8a:63:8c:08:42:de:
         ab:49:23:e3:09:d5:36:ad:f1:ff:4d:b1:18:f4:29:27:80:25:
         9e:64:68:0c:8e:ca:aa:cf:cf:67:da:8c:ee:4e:c5:d0:ac:0a:
         c3:d6:97:5b:d8:21:e1:4c:8b:e0:fc:22:cc:5b:8d:21:81:a8:
         62:70:79:39:9b:5f:c0:33:df:b0:7b:35:36:88:28:c0:3d:e7:
         aa:0c:8b:d2:ef:73:e8:8a:02:24:a9:f2:da:35:ba:d0:00:a0:
         97:d4:41:76:08:a0:56:ab:1c:65:74:f0:00:6b:62:76:83:aa:
         c9:a0:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----