Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          vOhoElzpyv7/lBgBiqSV6W16D3dYpv1nxqHJAruUmqM=
Subject key identifier:   A9:9B:89:07:B6:B2:82:B1:99:17:E4:85:32:19:A7:71:DD:86:EB:D7
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       01962E2AD6DFA2111FEB258F6464DACAB170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          0F1F
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: dBSOh2k4WRHMhaDj3R2CkiuT8aFk9Pd2tsQ+LCnFCYQ=)
                          2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:df:a2:11:1f:eb:25:8f:64:64:da:ca:b1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=a99b8907b6b282b19917e4853219a771dd86ebd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:5d:af:f0:40:6d:c1:32:fb:2f:d5:43:a4:
                    a1:e7:19:38:de:cf:14:82:47:88:2f:06:b3:7a:56:
                    91:a8:44:75:ce:62:9c:c6:bb:16:a7:35:c3:3e:1c:
                    d8:bd:d9:e0:30:2d:6e:e4:86:86:f9:60:31:1d:d8:
                    29:79:16:5d:a9:a7:bf:58:7b:40:19:f1:34:ca:2a:
                    d5:be:4e:42:4f:ba:6e:05:1a:79:bb:6c:b1:6d:8c:
                    3c:d4:d4:b6:f1:26:23:33:b3:9b:00:13:92:17:78:
                    cd:cb:ba:72:d5:4d:53:8e:6c:91:7e:37:40:f0:f2:
                    15:dd:77:e0:8a:e7:e3:fb:9d:54:96:f3:d1:12:24:
                    6a:18:9a:5d:f2:eb:c6:5c:55:99:34:f2:e6:83:af:
                    b5:dd:68:ca:f2:d4:3e:5c:16:26:6b:54:90:db:16:
                    34:71:ab:8f:22:1e:cd:42:32:fa:e1:d7:ed:16:0a:
                    36:ea:35:9d:a7:11:b4:5b:02:c3:3a:4a:31:7e:16:
                    53:95:1c:08:42:85:3e:6e:8a:7c:e5:c6:f8:e4:90:
                    1a:44:a7:8c:f7:24:42:d7:11:ec:47:80:7a:88:98:
                    8d:d3:9c:88:0b:e5:06:13:11:61:10:2d:13:c2:70:
                    6c:ee:b5:6b:1c:8a:87:c0:a5:52:64:a3:7f:cc:0e:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:89:07:B6:B2:82:B1:99:17:E4:85:32:19:A7:71:DD:86:EB:D7
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:67:b8:09:81:b7:21:37:ef:8a:04:55:cf:6b:69:c4:6d:da:
         20:ed:57:fe:8a:f2:1d:63:91:71:c6:ab:dc:eb:93:be:49:0c:
         c4:4f:c2:0f:e2:d4:26:cb:46:6b:74:3c:c5:d1:f1:a3:92:a7:
         98:36:ae:1a:a7:7e:56:17:59:f8:b2:c4:cb:bc:40:f2:c7:e8:
         a9:21:68:db:1b:07:09:b8:23:b9:2e:8e:f4:82:1b:fe:e6:46:
         5a:e4:d3:06:b5:70:06:88:04:d5:ed:42:ae:49:a1:45:f8:b9:
         24:60:92:0c:68:8a:59:66:1c:d9:fb:39:bd:d5:28:e6:75:e2:
         fd:d4:bf:7a:58:94:c7:25:21:56:48:e5:fc:53:3b:f3:64:ff:
         ce:8a:f9:30:57:9e:47:86:68:42:27:e5:ce:a4:89:74:56:4a:
         57:5f:7e:25:7a:5d:95:8e:e0:e4:14:b7:0a:0a:b6:2b:c5:e4:
         b4:8e:49:e2:20:db:9c:22:53:1f:01:8c:fc:c2:92:e7:e4:30:
         a6:bc:42:5f:c5:b0:ae:97:3b:6a:54:5e:e3:8f:39:34:d3:c3:
         58:f1:03:a2:88:a3:f4:d0:d8:43:74:0e:43:ee:48:63:45:1d:
         00:37:27:41:46:c1:e0:55:46:16:aa:9e:38:b0:7f:4f:3b:c0:
         44:31:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----