Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File:                     FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier:          7788iZN2JnLLZGrkFJ9remkpeHXAYLJvQ3s7tiOU02E=
Subject key identifier:   0A:B1:C9:55:95:33:AA:D7:2E:78:FC:F7:CD:29:AA:A9:0D:06:FF:D2
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer:       /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial:       01962E2ACB6B897BC8D2C8F5450C816E84F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: gwvXuGlsuA1Y0qBQrm+SZjWkdpxSdsf7GiOyAvqPE8E=)
                          2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cb:6b:89:7b:c8:d2:c8:f5:45:0c:81:6e:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=0ab1c9559533aad72e78fcf7cd29aaa90d06ffd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:36:9b:2e:f3:70:2b:f0:ee:63:2b:de:6d:
                    56:00:6c:9f:12:ca:ad:7e:eb:89:ea:11:ed:58:d5:
                    c0:4a:0a:4f:26:ce:48:a6:d1:77:1a:05:74:83:46:
                    11:f8:82:4f:0a:35:43:d6:ac:e4:30:33:ff:43:57:
                    76:d0:4b:7c:38:54:5c:4f:4e:1a:9f:94:20:34:23:
                    90:03:f6:f9:f2:b4:73:c7:32:9d:94:66:bf:45:6b:
                    df:8b:c6:b0:c5:4e:16:30:6e:7f:bb:f9:a0:e9:06:
                    f1:eb:4d:77:2a:ef:10:12:0e:b6:be:1d:7b:4f:3c:
                    ab:5b:84:81:3e:18:bf:0d:e8:bf:0f:e0:ce:07:74:
                    f5:3a:1e:2e:c9:d2:b0:79:3d:52:57:b2:fb:72:ba:
                    12:6a:e4:c0:f5:89:0a:44:ba:33:de:4d:d0:ea:ec:
                    b5:35:80:a2:b1:f1:f0:81:fe:ba:37:53:7c:d8:46:
                    71:b1:20:84:a1:a3:09:df:37:3f:66:5e:ff:9e:23:
                    f2:0b:50:32:79:56:98:73:4e:09:9c:27:4d:54:cb:
                    53:16:1a:df:1f:28:8b:3f:5a:63:95:a2:ab:f9:44:
                    36:03:da:0c:e3:7e:fa:d3:a4:64:f5:7e:e6:b3:9b:
                    bc:b2:db:7b:27:4d:e5:57:79:7c:76:aa:86:0d:ab:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B1:C9:55:95:33:AA:D7:2E:78:FC:F7:CD:29:AA:A9:0D:06:FF:D2
            X509v3 Authority Key Identifier:
                keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:13:61:e3:f4:1e:38:b4:a4:0d:50:b9:9a:bc:79:d6:fb:
         fc:ea:5a:87:53:5e:c6:70:8c:c7:58:56:49:ad:f6:ee:d4:7d:
         f7:af:a8:d9:99:2f:b6:98:86:2b:ba:3e:8b:7a:75:c6:4a:ed:
         9b:84:ef:0d:a1:29:a4:09:63:52:ac:a1:d1:fc:ff:82:97:d0:
         7b:62:5c:81:2a:54:00:60:8c:aa:49:a8:5a:d7:e9:43:48:52:
         0f:41:39:f1:eb:40:e5:12:71:88:8a:88:02:c3:c7:43:c8:34:
         fa:9a:b2:40:e6:0a:64:b5:8e:32:3c:9e:02:d4:ff:df:7a:93:
         62:41:cd:64:81:e6:65:9b:07:eb:b4:29:d9:c8:8f:4c:d8:56:
         69:a8:dd:ca:24:93:56:cf:23:36:12:9f:98:35:bd:51:c4:82:
         d8:b6:7c:4d:07:73:3e:fd:e4:6e:1a:eb:8a:21:28:0b:58:6b:
         ec:3e:ab:e7:b0:2e:91:c1:b6:cc:4c:ec:0f:0c:81:93:d6:b2:
         b6:c7:ba:89:32:a3:37:53:6d:3d:f9:74:12:da:de:48:fe:8e:
         db:50:37:30:3a:95:2a:1e:83:c9:8f:01:1e:3f:a6:8d:30:8a:
         81:d9:d9:ed:2a:bc:13:7f:bd:09:b1:83:5a:e9:7e:77:94:64:
         d0:f8:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----