Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File:                     tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier:          3Ssc1i7JL9aG5sOMysC2NQ3I7Kz7PvI1d4PbW4enR5g=
Subject key identifier:   4F:67:7D:7F:AD:7D:28:71:2C:34:B3:46:89:53:F3:21:87:9C:71:3F
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer:       /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial:       01962E9899CF9BDBCCA05368D608C48C0021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number:          05C1
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
                          2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 8zSYVkbaz3EWIytRnCravAo7GTZAFYIwis1n8OqVhP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:99:cf:9b:db:cc:a0:53:68:d6:08:c4:8c:00:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=4f677d7fad7d28712c34b3468953f321879c713f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:28:1f:8a:32:70:48:50:df:df:46:e4:85:
                    a2:5b:0f:7b:bf:a2:29:32:4a:e9:4b:21:19:ba:56:
                    d1:a5:d2:24:a8:1c:18:01:93:c5:70:42:e8:48:ce:
                    51:6d:0f:33:cd:b9:fd:3c:4f:8a:f2:3f:96:ea:73:
                    5c:be:0f:9d:3a:52:3e:59:0e:2b:6a:20:ee:a5:16:
                    f0:6a:07:b0:b2:cc:91:03:f5:02:0a:fc:d9:be:6d:
                    1d:d1:51:62:67:c8:d5:31:7e:9c:11:25:d7:e9:bb:
                    af:07:57:05:09:06:00:ed:c3:d8:86:95:a7:27:e2:
                    b2:ab:3f:bb:34:c2:c2:18:92:6b:a1:48:20:17:29:
                    b5:d7:a5:5e:58:a4:5c:01:fa:2b:3f:6f:d9:b1:b9:
                    c6:8a:60:d8:da:ed:f2:ac:57:3e:63:59:ae:4b:57:
                    19:a2:6f:df:1e:1b:4a:1c:50:8f:8c:a8:fc:60:38:
                    3b:0b:aa:06:0d:0f:5e:90:1e:ae:b0:eb:24:32:a6:
                    4e:ef:01:a1:d8:77:c8:68:e9:98:cc:38:c9:41:a5:
                    00:3b:2d:5d:fe:69:fc:f6:05:87:1e:53:fc:db:f4:
                    29:db:51:2d:d1:e9:79:5c:10:4d:30:8b:60:85:6b:
                    91:a1:89:fd:13:4a:e4:ab:30:65:98:0a:fb:8b:19:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:67:7D:7F:AD:7D:28:71:2C:34:B3:46:89:53:F3:21:87:9C:71:3F
            X509v3 Authority Key Identifier:
                keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:cf:81:7c:52:62:c2:24:d0:99:42:be:23:07:d3:4c:8d:7f:
         2f:23:c3:ef:5a:60:b4:55:a6:4c:60:29:29:4e:79:84:9b:7c:
         ce:6a:ca:30:cf:4f:e2:8b:ba:2a:58:b6:3b:c2:57:d9:fa:7e:
         ee:42:28:e9:2a:45:ee:17:02:a2:00:65:30:ef:6f:36:9e:e8:
         63:17:83:71:35:e5:c7:53:fa:02:4d:b8:17:fe:39:ed:0a:58:
         50:ab:0e:cc:b4:b1:5b:67:d6:0d:2b:94:66:47:c5:c4:ae:ef:
         6e:81:8d:cf:22:9d:8d:11:9b:f3:85:35:0d:3d:c9:fb:11:f1:
         e2:08:f2:88:38:a7:de:5c:08:19:98:0c:3d:6e:a0:7e:e2:62:
         d5:8f:b7:75:cf:0f:07:81:1a:f9:f8:18:6f:92:f3:d4:2e:84:
         55:14:c3:f1:2f:67:cc:2f:a3:1d:cf:0f:e6:27:18:33:b7:d8:
         d3:69:e2:c7:00:b5:c1:55:0e:a4:b0:60:90:0d:44:72:20:a3:
         fa:4f:85:bb:c5:59:bc:dc:b5:57:06:66:5e:b9:5c:6d:a8:0c:
         28:0a:98:99:12:60:9b:5c:0f:23:d4:a4:89:80:02:3d:44:95:
         18:af:fd:3b:40:64:f0:cd:7f:8a:27:34:8a:c4:b0:c7:5e:03:
         44:90:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----