Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          W3dLtb0XpbnuZUlvIe0NYu4Zd6rcI1rSsKorMUn5eYI=
Subject key identifier:   78:92:10:D8:ED:E2:6D:19:20:F2:A8:DA:B4:FE:B2:B1:EF:F1:58:92
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       01962F3DAB96F8F998B40A16056CDA0D01C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          0A89
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: K9oh/zVYwcsBci7Lo5YsBJGWFzwR2sbOoijwxfswuoc=)
                          2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ab:96:f8:f9:98:b4:0a:16:05:6c:da:0d:01:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=789210d8ede26d1920f2a8dab4feb2b1eff15892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:ef:e7:d7:66:ef:60:00:35:56:d7:6b:db:
                    7c:39:96:85:f2:df:97:f7:a4:ef:77:35:a8:87:7e:
                    df:9a:01:4c:83:3c:9c:6c:d2:16:48:63:bd:54:9b:
                    90:f0:53:fd:3e:d1:f0:6d:70:4d:7d:d2:05:a2:74:
                    7e:26:f8:ff:c4:d2:c0:a9:57:05:74:b0:9f:4a:10:
                    83:3d:e1:c4:24:2a:9c:49:34:0a:dc:07:5c:be:5c:
                    4a:e9:e5:2e:c6:b6:35:0c:02:45:3b:15:57:27:ad:
                    60:83:1d:3e:f7:15:28:b7:d8:3c:01:1e:59:ce:45:
                    b2:6d:f2:6f:8b:0d:31:99:81:e4:76:ff:db:b6:15:
                    f7:44:2d:28:57:bd:b6:5c:97:04:3c:53:1c:ff:7b:
                    62:71:2a:7a:5c:30:ea:d3:26:3d:54:57:0e:0f:8e:
                    fd:68:42:e3:58:7c:74:06:d4:ea:6d:36:68:4d:6a:
                    50:57:0e:45:33:8a:b2:28:8d:41:82:83:b5:a0:f9:
                    26:ba:33:60:d8:c9:73:31:d4:8e:4a:6b:73:c5:64:
                    48:9a:79:b4:59:04:62:de:d1:15:22:58:c7:6a:77:
                    ff:26:ee:94:4b:13:de:33:7f:2e:30:62:66:52:83:
                    e5:93:4a:b4:36:47:28:db:1a:d0:9d:88:68:06:64:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:10:D8:ED:E2:6D:19:20:F2:A8:DA:B4:FE:B2:B1:EF:F1:58:92
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f2:f3:c1:3e:f5:f5:e5:9e:73:db:53:16:f6:e3:13:2e:34:
         07:44:62:ea:49:90:34:bb:04:a7:f5:cf:4d:30:fd:c5:db:bc:
         f6:72:67:bc:cd:81:90:93:f1:1d:00:f2:ae:90:e2:a9:fd:1c:
         9b:19:ca:29:80:df:15:23:62:b2:cf:7c:f5:93:a2:90:02:96:
         49:65:0e:c7:7f:f1:07:0c:65:89:b6:d0:93:5a:28:71:ed:c7:
         7f:7c:3e:c2:03:81:e2:02:63:53:7f:fb:f4:a4:ec:9e:7c:f2:
         ec:93:54:30:d4:d8:65:22:31:16:fb:a5:d1:a6:5d:15:e2:35:
         3b:d1:79:85:c9:fe:d4:76:cf:71:9d:e7:6d:49:35:93:00:65:
         bf:03:12:bd:20:87:b4:f3:06:9a:86:27:79:87:30:e0:82:27:
         39:41:d8:db:84:e2:48:75:b2:b3:db:8d:7d:db:87:ae:8b:5c:
         c3:7d:68:a6:04:fc:f7:a7:bf:1d:1a:cc:86:43:91:c1:de:b2:
         0e:fe:a5:26:02:d6:c9:43:68:ca:82:d4:a4:b3:71:2c:43:78:
         e6:df:c8:23:cd:41:7a:8f:64:c8:54:39:4c:ff:4a:d4:66:97:
         eb:25:f2:e6:c8:d8:97:52:ee:77:93:0e:01:ad:d8:c0:8d:b9:
         d1:89:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----