Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File:                     F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier:          tjBMSAa/lkjCfKh3YaeOP1+3i/NSPSngMelSJklqKmQ=
Subject key identifier:   D1:02:15:48:D8:76:86:09:D7:91:CB:02:06:AB:9C:3F:68:DF:34:DE
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer:       /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial:       01962F0640899738654E5AD2D8D3E2C6255A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number:          10F7
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
                          2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: JyVGVtPTWTlZfwtg0ry19gZLQZgKaxaypmu9JWq97ak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:89:97:38:65:4e:5a:d2:d8:d3:e2:c6:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=d1021548d8768609d791cb0206ab9c3f68df34de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:65:31:52:db:52:28:8b:a5:cf:21:73:6a:
                    d7:ed:d2:56:df:bb:fd:62:3c:4d:6d:31:a6:51:cc:
                    e8:8e:87:85:51:cb:bd:b4:bb:69:06:61:20:65:39:
                    1c:78:e1:af:a5:d3:78:7d:2e:2b:c5:8c:a9:5c:eb:
                    77:6e:13:c8:09:c5:5f:6e:6f:e7:75:56:78:66:0c:
                    11:20:47:4b:43:1a:e1:fa:db:a5:43:f1:4a:cf:b3:
                    7a:90:05:84:48:f5:6d:a4:5e:17:84:6e:d2:1a:73:
                    44:e3:6f:04:47:85:ac:d3:38:c1:3b:e6:42:2c:f0:
                    6e:d2:7e:db:68:d7:a5:dc:99:d0:d6:df:01:0f:73:
                    c1:4c:43:82:3f:f2:fb:a2:5e:a4:e0:91:08:c0:69:
                    8c:1c:15:a1:06:21:66:e7:ed:62:7e:3f:b7:a4:88:
                    35:72:86:bc:a7:7e:20:0f:51:81:47:36:84:50:46:
                    f8:f2:cf:07:6b:bd:19:1a:57:11:a4:01:72:f4:08:
                    31:21:fc:3a:84:b6:25:12:0a:e3:de:10:d5:9e:5b:
                    7a:ba:ad:fd:62:8f:a9:15:d3:87:fd:6d:ce:eb:15:
                    fa:94:3e:26:0d:32:55:a9:15:e6:57:22:f2:1b:f9:
                    bd:a6:a0:e7:18:fb:77:1c:f6:38:52:84:95:9d:bd:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:15:48:D8:76:86:09:D7:91:CB:02:06:AB:9C:3F:68:DF:34:DE
            X509v3 Authority Key Identifier:
                keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:5d:4e:34:e7:19:da:4a:ab:6e:47:a7:fc:80:23:7e:4e:
         86:3a:74:a7:78:67:72:15:3d:9d:4b:07:db:01:8e:f4:78:ce:
         33:3b:1e:a9:69:32:0c:42:97:82:0c:9c:c6:3f:e1:62:20:9c:
         04:3d:ac:a5:85:f0:34:64:1c:29:d1:9b:e5:cd:4c:18:5d:75:
         04:ea:bc:78:c3:eb:7d:53:99:a5:5d:c1:50:37:0a:83:be:df:
         fb:d8:80:a3:13:8f:86:81:df:0b:79:10:1a:dd:7e:61:bc:41:
         59:8e:fd:5e:25:10:b7:d4:c4:42:51:a6:27:a7:c6:c4:23:e2:
         a4:09:00:a9:a0:53:1a:9b:66:1e:74:5a:f1:29:b1:9e:40:36:
         18:b5:f4:ca:a0:6a:98:da:1f:94:fd:26:f5:de:ac:69:96:e8:
         d7:89:3e:d8:f4:f2:7e:be:2d:a7:7f:51:e2:17:75:c3:14:c5:
         34:b2:56:f4:01:77:fb:bd:52:9e:bf:85:1b:c8:bb:0b:f1:13:
         80:e5:a0:f7:fb:3f:b3:0c:a7:37:d3:11:f6:68:d5:72:9c:1b:
         a1:13:31:19:89:86:ff:46:02:c5:ed:8a:3c:05:b0:2b:9a:ac:
         be:92:6a:52:74:21:4a:55:6b:86:82:41:57:53:5c:ee:07:d9:
         a3:36:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----