Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File:                     _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier:          EZPYBb6Av25j5slf/JIOwP0MyCxR+NqzYeqItazS4gY=
Subject key identifier:   9B:56:D9:BD:CC:57:8C:17:F7:8F:99:AA:19:28:A6:F3:1A:51:65:26
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer:       /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial:       01962ECF672C3143FFCB7ECCEFDF4CB4B92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
                          2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: bx8/gtbhOQIwdKWUw6iY4iw47ibJgLDtoRotvyBxN3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:2c:31:43:ff:cb:7e:cc:ef:df:4c:b4:b9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=9b56d9bdcc578c17f78f99aa1928a6f31a516526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:c9:69:bb:ad:ab:4b:40:8a:d6:ca:89:d1:
                    af:a9:ea:e8:73:20:2b:ad:1d:2b:6b:bf:42:d2:54:
                    a5:18:6b:db:30:ab:32:63:25:0e:59:41:53:c8:2e:
                    06:78:1b:11:a9:a8:8b:40:7b:2a:5e:ba:b7:a5:8b:
                    0a:c3:9c:b6:fa:cf:03:0c:10:a3:fa:8e:5f:dc:d3:
                    3e:e1:a1:a7:a0:9a:e0:6d:e8:9e:5b:6e:41:83:7a:
                    1d:e7:d2:49:cd:47:3d:07:05:fe:1a:6b:12:20:de:
                    6e:4a:f6:05:0b:02:ce:b2:76:df:b4:ed:f1:01:11:
                    63:d7:86:18:3e:bc:ea:14:f2:0b:18:15:8c:bd:4c:
                    de:bf:06:cf:90:17:af:5a:6f:2b:6c:24:5e:5f:1e:
                    8a:5f:88:1f:a6:a9:03:93:3a:01:cd:9e:c3:7e:80:
                    96:02:0e:58:8a:85:e0:94:1f:23:4e:f8:3e:63:2c:
                    71:2a:dd:68:69:aa:e4:bd:a0:30:f4:d6:56:90:df:
                    19:aa:c8:f1:10:77:06:3f:4c:67:76:c4:bd:7e:e8:
                    37:c8:c0:60:c3:aa:0a:23:4a:80:66:34:03:f5:14:
                    93:c3:cb:81:1b:92:79:78:26:58:5d:6c:f7:9f:eb:
                    ff:23:ca:45:dc:a3:26:cc:97:c0:bc:8e:91:3c:49:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:D9:BD:CC:57:8C:17:F7:8F:99:AA:19:28:A6:F3:1A:51:65:26
            X509v3 Authority Key Identifier:
                keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:e0:2d:36:2a:98:93:9c:84:da:9c:73:16:c8:be:f1:ef:
         10:21:da:ac:b3:ec:06:80:81:41:5b:3f:0d:1c:19:6c:e8:db:
         5c:19:37:6a:c6:73:18:a1:9a:69:39:50:39:f2:25:10:b5:58:
         93:db:62:52:56:61:00:0a:7a:e4:b4:54:a9:f6:c8:f7:d2:15:
         bd:83:6b:98:78:45:80:fd:f9:23:41:13:94:5f:86:d9:12:d0:
         83:40:22:e6:a7:7a:66:e8:49:ef:86:2f:ba:8c:b0:bc:f2:5f:
         af:fe:1a:f7:36:ac:f0:49:8c:c9:5a:ee:8f:c8:05:41:39:d5:
         99:a0:ce:66:26:e1:77:fc:97:6f:c2:62:5c:b9:36:f9:11:93:
         31:3f:bb:48:01:4c:05:97:9e:f6:30:7e:c5:81:e7:47:da:41:
         ab:7e:e4:78:5c:80:72:62:9b:2b:83:49:28:1f:6b:cc:f8:06:
         a7:18:00:f5:38:e0:84:45:25:0e:46:32:b4:6d:c9:3a:28:b3:
         4e:97:0f:53:cc:a2:89:59:cc:e7:2e:91:b3:61:d3:b4:24:4a:
         79:92:cc:00:d0:6a:b7:0b:ba:7c:e8:c6:40:5c:36:c7:fd:4f:
         85:25:94:ca:75:65:08:3b:7a:61:38:79:28:21:e8:12:f4:6d:
         e9:21:8b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----