Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File:                     fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier:          ybREOPe0QLKUBAkfAtoaVDtYjuoaogpHRG7GEVSXMZE=
Subject key identifier:   BA:1B:EB:0D:90:1A:98:67:55:AB:7E:33:00:EB:24:60:FC:CC:61:22
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer:       /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial:       01962E9953E1EBCA7AF62020DD9E5D67887F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number:          087A
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: 33S/61WMBByS65R11TKmQIswSiKuvroqsBqzrqlGrHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:53:e1:eb:ca:7a:f6:20:20:dd:9e:5d:67:88:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=ba1beb0d901a986755ab7e3300eb2460fccc6122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:bf:f7:97:f4:9b:5a:db:ec:11:f2:1c:78:
                    42:08:06:ef:f8:af:ef:91:49:41:61:79:1a:c2:d7:
                    2f:b7:dc:87:69:cd:27:d7:a5:c7:cf:fe:d8:9d:66:
                    64:f5:c0:d8:17:d5:85:6d:c7:6a:56:d0:de:6b:42:
                    0a:bd:df:66:fe:31:e9:4a:90:fd:42:46:6f:b9:0a:
                    d6:63:84:b2:6c:51:c0:d2:36:af:59:55:0c:2f:6a:
                    51:85:0c:50:8d:20:8f:cd:60:35:e1:0d:8d:12:54:
                    8e:b4:15:2d:55:85:ad:ab:0a:4c:b4:8d:44:f7:36:
                    4a:62:b4:1e:93:23:20:8a:66:c9:a3:cf:a5:93:70:
                    ed:fd:c0:97:0f:9c:13:6e:a2:cf:4f:9a:13:41:1b:
                    b7:f3:ba:63:2f:9f:9f:a2:bb:17:b6:c9:5a:62:1d:
                    80:7f:b9:0c:c8:88:80:4b:29:0c:e5:f2:98:43:81:
                    9e:43:a8:25:b4:67:fc:4f:22:f2:ec:dc:fb:8d:9a:
                    7a:50:2b:f6:da:35:df:48:ea:74:b3:7c:bb:f2:47:
                    ee:cf:a6:57:20:ba:fa:4b:54:0d:79:31:66:0f:f9:
                    f3:9d:8a:19:7a:f8:16:05:de:c8:f0:52:ad:30:70:
                    85:84:3a:69:88:bb:f9:04:9e:fc:3f:73:d1:5a:57:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:EB:0D:90:1A:98:67:55:AB:7E:33:00:EB:24:60:FC:CC:61:22
            X509v3 Authority Key Identifier:
                keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:31:92:0e:d4:f9:20:05:5b:a2:5b:ef:ad:0e:da:90:46:
         4c:79:b6:d4:4d:a8:a5:8b:ca:f8:f3:1f:db:42:8b:5e:cc:de:
         c1:0e:a0:1b:c9:d7:fa:17:0b:76:27:c7:d6:60:d9:4f:6e:d6:
         82:6d:16:d4:f1:9e:48:ad:ca:96:17:95:5d:e2:9b:cd:85:00:
         e1:d8:80:fd:f6:fb:da:4a:9b:01:a0:cc:ed:e1:85:a8:34:4a:
         f0:5b:7d:cd:08:8a:39:af:ad:55:9c:37:43:29:c0:8f:b9:d2:
         e2:99:1c:82:a9:d6:26:59:a8:0b:33:45:40:67:ee:7a:3c:7c:
         dc:5a:1f:c1:76:1d:ac:c4:bc:5f:6c:24:46:c6:68:f6:76:30:
         0f:a1:8c:fb:f9:0b:d8:18:0e:12:62:e6:d3:af:58:89:8f:68:
         fc:7a:96:ff:48:c6:69:ce:f0:d7:f4:10:4e:35:cf:bd:59:99:
         ff:a4:eb:4b:67:a7:7b:08:56:8c:97:3d:0d:b4:5d:f6:e2:b2:
         c5:86:ed:d9:d9:e1:56:27:19:42:e4:4d:b4:80:da:19:5c:82:
         cb:08:10:8a:c7:43:e3:d2:0d:92:75:aa:78:16:dd:21:ce:ef:
         c1:ea:24:3d:b6:a8:02:6f:79:53:00:33:e6:17:75:88:05:ad:
         c5:31:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----