Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File:                     rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier:          qKTYD1dq/8CjZlF2X5Q4CFVst4DL47mpJVfekYWUQrA=
Subject key identifier:   FE:1B:D5:03:E0:18:97:D3:50:CE:2C:FC:C1:E9:7F:D9:2D:C3:3B:F9
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer:       /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial:       01962F3D9FC80390B3719C737812ED1A46C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number:          0251
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: ntg1quKHhrUnKYtl6U73CC1C4CCKdvCammuuNABXEQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:c8:03:90:b3:71:9c:73:78:12:ed:1a:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=fe1bd503e01897d350ce2cfcc1e97fd92dc33bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:f4:d3:01:b4:07:38:4d:a0:a9:80:1c:cf:
                    d5:a3:f7:5a:e6:9a:f5:3f:79:30:06:79:eb:ca:70:
                    3f:d1:ed:35:11:40:b7:fe:7b:35:a2:44:06:c4:61:
                    f3:f3:c7:94:b9:c9:91:c1:e8:1d:3a:23:eb:ed:8f:
                    c7:65:95:89:03:81:1b:e6:17:4a:75:71:eb:52:66:
                    24:6c:96:07:5d:21:9d:72:9b:dc:e1:9c:bf:02:95:
                    5f:ed:73:fb:a1:03:1c:3e:41:67:9f:b1:49:6a:5a:
                    80:03:22:ec:0b:84:c8:24:16:d4:36:32:16:52:64:
                    61:1e:d6:74:1b:de:f8:63:ae:65:68:93:02:6b:1f:
                    6e:96:10:a2:0f:10:de:74:b8:6f:c9:8a:0d:76:7b:
                    f1:49:56:f9:37:b7:58:81:94:a3:9c:e2:0b:47:36:
                    55:ef:02:8a:47:fb:c8:4b:9a:c5:2a:a8:ae:08:9b:
                    89:e8:ed:a9:59:4d:70:01:d7:89:55:e6:f0:42:d1:
                    98:cc:99:63:68:22:ef:dc:00:b8:c9:11:d0:ba:95:
                    df:40:8d:37:d8:b3:97:79:5c:a6:aa:65:9d:b9:65:
                    e1:da:88:95:27:d5:60:ee:f0:ba:37:69:f1:22:76:
                    ee:3f:47:98:4a:56:1e:ce:4b:28:4b:40:23:f7:bc:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:D5:03:E0:18:97:D3:50:CE:2C:FC:C1:E9:7F:D9:2D:C3:3B:F9
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:49:da:b1:b4:2e:62:85:60:fb:ee:e3:dc:78:eb:79:97:9a:
         ca:5f:55:02:f2:56:fd:97:a0:fe:33:46:fa:f2:dd:ce:c5:8c:
         0f:25:81:ce:0c:6e:6e:e7:97:8c:dd:3c:24:f5:cf:e6:ba:68:
         6c:43:5e:5b:9b:e4:8e:17:c1:5e:23:b1:4a:ed:b6:15:f8:a6:
         75:7d:d9:29:8d:f3:89:f9:53:ba:b0:44:f7:3b:e9:82:b3:d0:
         14:da:63:4d:c3:b7:af:6e:61:19:a5:b5:2f:d5:d9:a7:83:58:
         00:8d:d2:7b:b8:f2:12:bb:88:de:6a:e1:c2:c8:65:1d:55:24:
         1c:28:c5:49:e1:4e:52:14:bb:12:f8:bf:11:78:b7:cc:a2:fc:
         b9:b6:2a:7c:80:6f:24:36:28:53:11:40:30:74:87:20:a7:21:
         f7:ae:94:b5:5f:06:a7:fc:1e:22:cb:cd:14:24:df:62:d0:7e:
         36:dc:94:a1:b5:dc:d5:d3:4e:a4:75:fe:01:f1:0d:12:5f:b1:
         b1:34:a7:34:fa:29:26:c1:60:0b:32:56:ff:21:fd:05:6c:80:
         39:ee:dc:4e:20:8e:c3:7b:1c:42:f9:62:a5:05:7c:e9:0e:43:
         8b:c1:82:ce:f8:15:71:c5:7c:2b:29:48:4a:50:0f:29:0c:7a:
         f9:68:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----