Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File:                     fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier:          43oD//tOJcgMnmSsbge7xjFuFo2++9tZ6o1BsMJbsQY=
Subject key identifier:   B9:19:9B:46:68:4F:F6:C4:41:EC:7A:6D:A7:31:49:53:15:22:D6:89
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer:       /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial:       01962F06A1F6DA9075E0B1D7BC34153D3FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number:          0DB4
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: EicILBcLCTefQuU3J+jXqM/k4AQJvY6tmkbyqtHaCAM=)
                          2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a1:f6:da:90:75:e0:b1:d7:bc:34:15:3d:3f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=b9199b46684ff6c441ec7a6da73149531522d689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:1c:76:52:43:77:c8:b1:f3:95:5a:19:65:
                    2a:42:82:55:aa:a0:68:1d:4d:40:4c:ed:49:3c:2c:
                    e8:66:61:95:79:43:da:c3:7a:0e:cd:4b:dd:a6:ec:
                    ac:fb:17:f8:5c:7b:d1:45:53:94:53:08:fb:11:5a:
                    36:c5:b1:bc:05:c8:52:7b:01:c1:7b:bf:d1:9d:a0:
                    cf:ef:3e:67:ab:b6:48:04:2f:98:a6:4c:09:c5:e3:
                    d1:c6:49:e2:fd:33:2a:c6:39:74:84:c2:5e:30:58:
                    ab:c8:b7:79:7e:8a:4e:5b:60:42:b5:18:4a:46:37:
                    0a:be:26:13:cc:ab:eb:33:01:c3:0f:bf:9e:33:87:
                    d5:06:24:57:dc:ee:ca:3a:d6:98:2a:aa:2a:bc:4c:
                    e6:6d:70:2a:af:9f:6d:c1:47:40:f8:9a:1f:30:d9:
                    62:19:4a:42:26:f3:7c:2d:91:2a:31:10:27:2b:51:
                    c7:70:f7:e7:85:fd:0a:11:58:0b:4c:4a:08:c0:4b:
                    26:7d:77:71:70:61:0e:e3:53:88:c0:72:bd:30:b4:
                    28:13:89:e0:ec:46:cb:4e:ce:a1:d2:6f:65:54:b0:
                    99:29:31:38:e7:9c:01:fa:7f:07:9e:56:40:24:78:
                    46:41:96:33:22:a0:fb:57:8f:0e:04:4c:ff:7e:0b:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:9B:46:68:4F:F6:C4:41:EC:7A:6D:A7:31:49:53:15:22:D6:89
            X509v3 Authority Key Identifier:
                keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ff:f3:6b:65:73:35:42:fe:2d:31:af:84:f4:1c:ec:f7:22:
         38:a3:05:be:55:44:20:39:31:52:46:fb:d2:66:d8:b1:71:59:
         ff:8a:c7:55:03:8b:35:e6:fd:1c:30:8b:81:7b:75:5f:48:70:
         1d:61:d7:52:0c:fa:39:db:06:8e:2e:ad:fc:7a:56:95:68:dc:
         89:10:9e:d7:a7:8c:6d:be:86:e7:70:a1:bb:62:b4:a6:ca:c0:
         6c:17:3f:9f:42:7e:1c:6c:71:e8:7c:74:17:81:bf:31:3d:0c:
         f2:71:92:cb:0a:14:c5:9c:c9:83:b3:63:ee:52:35:c8:3b:55:
         29:52:f6:bc:b8:b7:07:c5:a9:7d:3b:66:7c:b6:d2:c3:27:8e:
         a5:7c:ec:52:22:bd:fe:89:27:0a:b5:df:d9:53:cf:53:8d:8e:
         31:6b:d7:b5:3f:42:53:e6:02:75:fb:4e:bb:35:03:5c:be:46:
         d9:93:6d:97:1c:f3:be:06:bb:2b:4f:92:0c:0c:37:28:9c:de:
         fb:1d:3e:91:a0:16:74:31:b3:c4:0e:05:3b:10:7b:0b:0d:ba:
         33:70:53:d8:d4:84:01:d7:81:a6:38:fe:15:a4:c0:27:3d:e0:
         bc:25:d9:75:95:64:cb:7f:cc:91:06:b7:9a:f6:f3:94:76:2a:
         54:60:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----