Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File:                     fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier:          koyLTrAu+pG6tV7QPOY7vkssRfjkvtzX2qAMPz47nsE=
Subject key identifier:   FA:13:3D:57:97:9E:C4:71:C1:53:23:04:C4:F0:8A:20:42:C5:62:C8
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer:       /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial:       01962E98D8194EFFA2BAAB928EEB188F447B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number:          014B
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: aZNWrsqYsMoq4lhfe1ZxSusPXX7fZvqj71M+odRdUtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:19:4e:ff:a2:ba:ab:92:8e:eb:18:8f:44:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=fa133d57979ec471c1532304c4f08a2042c562c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:6b:3b:e5:bf:1d:5d:f2:85:66:6c:9a:18:
                    d7:85:ea:26:5c:26:9f:63:dc:95:c9:42:4a:13:73:
                    6d:5b:e8:78:65:49:ff:22:73:f4:d3:39:fd:20:d4:
                    9f:44:ae:cd:c6:af:25:37:d7:d0:29:ce:56:c5:0b:
                    d4:33:df:23:0e:bc:ae:20:c4:dd:1f:04:14:e3:12:
                    69:01:ff:6b:f0:3d:c8:91:bb:50:4f:68:82:f9:4d:
                    14:c8:98:5d:7f:df:d4:22:d6:29:0b:8a:6a:8a:14:
                    1a:81:21:a1:19:fa:cd:1a:1c:ce:a6:56:a9:aa:51:
                    b3:e9:9d:22:f2:b4:17:0c:fa:75:83:62:bd:27:17:
                    03:7b:3a:fe:3c:77:d0:63:aa:95:30:e6:d3:37:85:
                    44:a9:53:0e:d0:c0:c6:9c:b7:95:9f:a7:64:fa:87:
                    91:36:db:12:0c:1b:28:e4:28:1e:5b:b6:36:02:42:
                    10:c8:66:bd:71:aa:75:78:30:c8:16:42:3e:6e:4a:
                    af:4f:44:3b:37:55:dd:39:7c:6f:c7:f6:96:22:0a:
                    39:7f:15:42:3a:13:99:1d:b5:3f:6e:98:86:9b:ab:
                    f4:a9:84:a9:0b:6d:aa:bb:12:76:91:93:ba:68:95:
                    b3:08:8e:b4:4f:bd:1a:8d:d5:f0:2f:f9:21:79:88:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:3D:57:97:9E:C4:71:C1:53:23:04:C4:F0:8A:20:42:C5:62:C8
            X509v3 Authority Key Identifier:
                keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fe:c8:0c:cf:7f:67:92:0e:ea:b3:44:f1:df:82:49:c0:ef:
         23:8d:34:83:b6:f2:16:aa:19:da:79:11:d4:55:0d:33:45:ef:
         f8:7f:95:c1:4c:6d:2f:32:b9:45:b8:be:9a:d9:d4:22:5e:71:
         98:19:ab:fc:fa:9c:10:fa:3f:49:95:34:92:07:6b:ba:46:61:
         3c:a2:40:89:11:c4:ea:3e:80:c0:2a:ef:a9:99:39:dd:ff:5b:
         8d:e5:a0:f2:30:29:6e:86:ac:6f:0f:50:bc:a1:48:d9:10:9b:
         92:47:7e:5f:51:59:6b:e4:02:ec:47:db:d1:5c:63:e8:45:36:
         18:ed:32:2a:4e:e3:65:ac:b0:29:7f:3f:41:1b:bd:f1:2c:90:
         f3:93:0f:1d:ef:a4:68:e1:0b:7f:66:0f:51:21:c9:30:79:6d:
         cf:53:0e:55:d2:a8:ec:a4:ed:ea:aa:f8:83:0e:d0:1c:15:4a:
         fb:8c:1e:4b:c8:a7:af:0e:42:59:57:43:38:79:35:35:49:df:
         88:bc:e9:f2:d5:ce:03:f6:f9:36:f9:41:b4:44:7a:57:bf:5a:
         76:23:51:7a:f0:90:1b:e3:76:2e:f8:30:76:49:b1:e8:9c:de:
         40:ae:dd:f6:1a:5a:f0:4e:56:9b:f0:0e:28:57:cc:9d:62:af:
         46:54:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----