Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          1eSe3pAVEmWv23XW5kUOlCNf8HiGPalx7UEEyYJnxZc=
Subject key identifier:   B8:EE:02:B9:68:48:FA:1A:59:C7:8A:AC:2E:2B:31:27:6E:89:F8:75
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       01962E2B03AD54E99C6859E42C09347CEA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          0F4B
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: 7TSh/LD8zzIYoVHdRuxOUZwsZXfMLyvOPMf9dOpvwJk=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:03:ad:54:e9:9c:68:59:e4:2c:09:34:7c:ea:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=b8ee02b96848fa1a59c78aac2e2b31276e89f875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:33:76:87:ab:a5:98:c1:55:33:9a:e3:bc:b9:
                    06:6b:35:5a:4a:5a:93:a4:57:d4:15:9c:5f:35:37:
                    36:19:d1:38:af:cd:20:06:4c:9b:31:8e:0c:76:a3:
                    b1:64:ff:f9:f6:13:b4:91:b9:eb:2a:72:8c:f3:0b:
                    63:d1:6e:44:2d:2c:9f:bc:62:7a:f2:b2:8a:81:f9:
                    cc:13:d3:25:5c:89:8a:ff:d3:4a:20:c7:a5:21:61:
                    a8:59:21:7e:6e:5d:74:25:ed:40:ff:75:05:5f:0e:
                    ae:24:eb:a4:98:a7:eb:f0:ce:de:59:4c:ee:bf:c7:
                    b4:93:e2:88:72:74:8b:81:fb:34:5c:82:04:d6:b9:
                    aa:db:0d:1b:59:5b:49:62:f4:17:0c:69:e3:a6:b5:
                    dc:34:d9:01:e4:0f:64:71:91:18:b5:bf:57:6b:c8:
                    f9:e5:6d:c8:fa:b3:9c:d3:ec:c4:04:38:ff:f0:da:
                    8e:15:0e:64:f8:fe:67:88:30:84:2d:13:98:50:dc:
                    55:b2:84:36:88:db:46:7d:70:c1:c5:9a:bf:b0:e9:
                    65:3f:08:4a:74:65:32:05:14:bb:67:8e:50:dc:07:
                    a3:9b:32:3b:9b:77:3b:ef:2b:5c:3e:9e:9e:4b:a2:
                    2c:eb:87:ee:a6:26:76:4a:f0:ca:52:25:10:1d:2b:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:02:B9:68:48:FA:1A:59:C7:8A:AC:2E:2B:31:27:6E:89:F8:75
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:ee:51:81:0d:0b:f1:d2:85:05:8a:f8:b9:d4:a9:97:53:
         96:a6:21:ec:e4:6f:25:e0:c9:d6:40:66:c7:8d:eb:cc:b8:04:
         eb:b8:6c:6e:48:09:66:fe:1e:0f:c9:7c:0d:b3:7b:d3:85:18:
         38:0d:27:5b:29:05:94:8a:df:88:8b:14:d4:7a:d9:f0:7a:71:
         81:08:3f:75:55:0d:6e:da:fb:bf:87:4d:42:47:d9:9b:9d:8e:
         93:5e:68:94:ea:ee:a0:0f:39:46:a9:ad:fd:df:6e:03:23:a8:
         11:bc:ea:37:cc:bd:94:3e:7f:4e:84:7f:5d:24:fd:4f:8f:69:
         d9:50:ea:1a:88:db:92:b2:96:6e:3b:9d:c3:6c:8c:c8:c1:a4:
         8a:6e:f5:7a:b5:1e:6d:92:69:5d:60:63:97:c2:af:35:38:ec:
         a3:fa:14:80:e1:87:46:4c:95:34:ef:5d:43:15:c7:a3:27:c5:
         63:b8:9d:f2:55:b0:d5:92:2d:48:ba:68:59:11:79:ef:93:01:
         6a:13:3c:33:a5:1a:d8:c8:f4:b5:80:10:b2:72:d6:1d:3f:b9:
         97:4d:38:0f:3d:40:b9:f6:1d:2c:9c:de:12:db:34:79:b1:fe:
         88:2c:e3:39:ee:02:55:fa:7e:36:d1:55:e7:38:71:9f:d8:3c:
         35:b0:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----