Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          zEsX2nAvqvVFcWGR3dzJ/9oXuXX7+cQ2/a1/ihqUXR0=
Subject key identifier:   B6:1D:B3:FA:49:2C:C6:BD:7B:8B:92:0D:B4:65:70:F3:43:0F:8F:29
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       01962F3DAA3EB3FE8F41ECB5B824ADE6846B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          74
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: /KaDnEIyjEEINLK1Skz0sbCAUjFAX123OZYpms4unh8=)
                          2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:3e:b3:fe:8f:41:ec:b5:b8:24:ad:e6:84:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=b61db3fa492cc6bd7b8b920db46570f3430f8f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:c1:53:4f:3a:66:45:15:56:e4:61:19:dc:
                    46:bf:80:0e:b2:af:24:5a:32:1b:3d:00:4a:16:0b:
                    20:94:6f:0b:26:b6:0a:9e:ed:46:1e:ed:3a:50:09:
                    93:af:02:ab:14:69:06:d1:fb:e3:4e:5b:83:e7:d0:
                    f7:db:8e:10:4c:f5:a8:06:50:18:6a:7f:b8:2b:26:
                    ba:85:12:4a:ad:ea:67:2b:9a:59:b7:3f:09:df:5f:
                    5e:b8:8f:4b:4a:c9:dc:e8:ba:1a:38:41:8d:dd:56:
                    92:0d:9a:17:85:06:c0:23:3f:d4:cf:e2:53:7f:da:
                    15:e5:3f:bc:7b:03:df:bf:31:19:29:ba:eb:9f:e5:
                    88:42:a9:4f:0a:9c:b0:fa:be:d0:ff:47:3c:29:8d:
                    6a:cd:cc:47:5c:e3:a6:aa:c4:0e:6e:e5:89:87:a0:
                    43:ce:b9:c8:db:50:5e:eb:94:7a:d5:2f:8f:24:2a:
                    80:b7:5e:b8:f8:5f:cd:30:7f:cc:14:4d:9b:9c:81:
                    e6:6c:ec:32:a2:c5:ac:8c:1c:cd:ad:a0:0d:89:d1:
                    c8:06:6f:06:1c:bd:3c:ee:2c:24:39:43:f9:6e:6b:
                    10:d3:cd:78:cf:1e:dd:80:39:d2:5e:a3:be:41:6c:
                    ec:e7:cb:03:60:a5:ca:28:a4:96:e6:2d:fc:ec:68:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1D:B3:FA:49:2C:C6:BD:7B:8B:92:0D:B4:65:70:F3:43:0F:8F:29
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d3:9b:a0:d6:43:86:58:41:2e:7e:f8:28:1a:86:dc:7e:86:
         54:e1:c7:89:bb:88:d7:72:a1:89:18:45:b8:a3:92:4d:f2:e7:
         47:9c:c4:6e:2d:7d:5b:fe:4b:f9:b5:2a:6f:ea:ac:4a:75:63:
         a3:93:06:36:ab:ba:ec:97:93:15:c2:9f:e3:45:4b:45:f5:94:
         78:71:5d:20:1f:58:a0:a7:bb:a0:84:87:51:74:3e:06:9f:06:
         50:db:61:91:ab:e6:0e:b5:c8:32:e1:a3:a5:44:f5:61:23:c2:
         53:01:7e:14:ce:c7:d4:cf:6a:1b:3e:e4:e3:82:b9:75:49:e8:
         e7:03:36:91:98:39:ff:6c:04:09:f5:45:52:38:b3:c3:12:1a:
         91:be:5a:5b:f9:d1:63:0c:32:7a:d1:43:e8:6a:11:75:b1:97:
         95:01:b9:b5:ba:b6:87:d6:13:fb:69:60:66:ac:0b:9c:29:f1:
         fe:05:4a:f4:c5:eb:22:31:fa:c4:0c:83:f3:b9:9a:54:9c:51:
         dc:01:ac:fc:ad:93:79:7f:31:91:f9:75:9f:a9:5f:68:25:53:
         77:82:d0:d4:2e:12:29:8a:84:47:89:c0:56:04:83:09:b6:ba:
         12:a8:3c:ed:49:57:da:4e:08:f8:0e:1c:98:84:be:1d:30:21:
         b7:7a:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----