Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          AUOvrVoqXpf/qwFAGlbucbtcbflpu+aJ3yPuTb8jHSo=
Subject key identifier:   B7:77:7A:F5:F3:33:D2:4C:11:76:E5:C2:2D:1C:9E:D8:F3:8C:C8:A9
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       01962DF3E1141B05E0E41362C2569D625E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: viHMuuLwlv5l1zHIKC11t7WID2Gg8lVbkjcwjGLSHV0=)
                          2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:14:1b:05:e0:e4:13:62:c2:56:9d:62:5e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=b7777af5f333d24c1176e5c22d1c9ed8f38cc8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:be:4a:31:af:67:0c:56:ad:ae:5b:a3:18:
                    1b:b8:f9:e1:0b:49:27:dd:d8:af:fc:02:0f:57:4e:
                    1c:1d:7e:44:68:e6:91:3f:b9:7c:45:ed:79:08:a3:
                    8d:e7:cb:c2:3a:1a:f9:10:a5:3c:46:c0:c1:6e:19:
                    bc:cc:1b:26:44:cc:1d:e0:a0:c2:85:ae:ad:38:5c:
                    fc:03:95:33:1b:17:7e:a6:ed:46:a7:a4:dc:d9:ea:
                    44:66:30:8e:b8:6a:cd:00:ad:c8:60:40:32:bd:c5:
                    68:36:24:40:3f:37:75:8a:25:ec:88:f2:0d:e3:ff:
                    bf:af:ae:06:12:57:5f:76:37:d5:cb:ea:12:75:82:
                    59:d8:16:44:b4:e1:e5:61:6d:2c:de:e5:5e:ee:fa:
                    ed:d8:f6:fb:1d:a0:9a:7e:2e:6d:81:fd:51:e1:2a:
                    e2:4b:72:70:f2:86:7c:da:1c:04:01:dd:0a:8f:44:
                    26:ef:b9:95:2f:f9:08:de:43:99:a6:03:7b:af:f7:
                    da:04:ec:63:8b:62:46:91:12:e3:44:12:a1:51:b2:
                    f1:58:e7:87:3b:16:42:9f:8d:6f:7a:05:2a:f0:8d:
                    e1:b9:22:ed:ef:ad:5c:b9:46:27:d1:49:8e:04:32:
                    dc:9d:e2:52:c5:aa:3e:7f:6c:ee:5b:25:f3:c3:a7:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:77:7A:F5:F3:33:D2:4C:11:76:E5:C2:2D:1C:9E:D8:F3:8C:C8:A9
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:be:ee:0e:66:19:4c:7f:c3:50:5b:4a:c4:a2:f0:17:78:1e:
         b2:1b:15:79:71:98:40:57:bc:f2:3f:60:16:c8:99:b6:bc:fb:
         59:0b:32:5f:ea:62:f8:53:10:46:23:f4:b4:66:a7:8b:76:16:
         bf:7b:b0:cd:1b:00:d5:a7:a6:ed:38:b0:c9:db:2e:8b:17:db:
         c4:49:7b:f3:54:30:8b:42:54:1a:51:7f:f4:a3:95:64:a1:41:
         55:9d:8a:ed:1d:59:6a:e3:55:0b:42:4d:ef:22:3a:e6:84:3a:
         ad:ce:ff:e3:77:1b:44:b0:4b:ed:ea:9a:1a:1c:4c:87:76:60:
         a2:40:bd:04:c3:ba:67:fc:cf:1a:9b:b6:20:9c:8a:4b:37:64:
         d1:d5:b8:7d:dd:43:05:38:56:58:e4:bf:6a:6b:db:f6:de:dc:
         ad:7d:69:31:5d:34:81:ee:3b:88:0a:ba:c4:1b:74:93:37:72:
         10:3d:29:77:39:c3:51:b2:18:61:ac:3a:73:f5:0b:83:ad:89:
         3e:36:a6:42:c8:c5:53:9e:3e:6c:c8:7f:06:f6:42:ac:0c:2e:
         4f:26:79:89:e0:20:ac:cd:fc:17:bc:cc:ec:65:23:0c:e8:0c:
         c1:55:92:47:f6:d7:35:8b:ce:d5:19:3c:93:75:21:f3:7f:c4:
         76:10:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----