Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
File:                     __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json)
Hash identifier:          m41HP15M27xKiVOF+iAhJg+sonOsyz1gOwW23fCbyd0=
Subject key identifier:   D8:7A:C2:6A:C7:5B:9D:09:2F:F5:BC:A2:9A:38:3B:F1:BF:10:A5:5F
Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
Certificate issuer:       /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Certificate serial:       01962ECFDE9FB7C81B36E198F37B5715EF63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
Manifest number:          30
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 0kaaAyo2H1IRNt6Ftj5Xi8qB5D8.roa (hash: vEdWjhFIP+oKICnFyIXPgNR6jJ68k0xMBCGivZ1H4Mc=)
                          2: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: wNc/O5nCmJxT+br+WQDZbsoOOBBJznYpxtnk0zBCQX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:9f:b7:c8:1b:36:e1:98:f3:7b:57:15:ef:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=d87ac26ac75b9d092ff5bca29a383bf1bf10a55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:63:b8:2d:19:90:b8:54:c0:e3:4a:09:f7:
                    50:06:e4:e8:db:61:3e:c1:51:ff:7f:84:09:8e:68:
                    ec:bb:8d:4e:c6:e8:d5:f7:0d:fc:6d:91:d3:1c:7f:
                    12:12:ba:01:ac:57:65:4a:7f:31:5d:85:a0:be:7a:
                    55:0f:34:4b:9b:93:bd:ea:4b:82:aa:41:87:a3:8c:
                    22:bc:72:2d:3c:1a:98:2b:a6:48:a4:0b:4e:fa:d7:
                    fe:93:42:ec:a1:92:43:79:04:48:93:54:e5:42:7e:
                    ce:20:5d:90:c4:57:0f:9e:b8:21:00:f2:ad:4f:32:
                    6e:16:29:ef:21:d3:14:2a:a5:e7:c8:68:78:9a:06:
                    1f:8b:27:9e:87:e2:23:cc:a1:30:f3:b2:46:10:49:
                    0a:73:37:7e:87:ab:e9:d6:9b:3e:b4:09:ef:43:f8:
                    9b:26:01:37:d2:95:f0:53:19:93:48:c0:6a:42:60:
                    04:60:37:da:5e:b3:88:2a:60:6e:c4:b4:0e:fb:08:
                    1e:9f:aa:5d:a6:fe:2c:46:e0:dc:dd:44:95:5c:5b:
                    af:26:46:4c:a2:3d:a9:84:6a:a6:0a:1e:cf:c5:7a:
                    86:f7:d8:04:44:43:ff:83:d3:95:ba:26:77:9a:42:
                    53:e0:a0:a7:f6:f0:9b:9d:b9:f7:6a:7b:40:97:74:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7A:C2:6A:C7:5B:9D:09:2F:F5:BC:A2:9A:38:3B:F1:BF:10:A5:5F
            X509v3 Authority Key Identifier:
                keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:49:5f:8e:94:41:2c:ed:b1:b1:d5:0d:bc:6e:6a:fb:dc:5a:
         09:34:36:87:f3:54:3a:3d:f1:c3:52:ed:8f:23:1f:13:3b:36:
         8e:7b:cc:b3:0c:d9:ee:d8:47:6a:9e:71:a1:57:24:5a:15:7a:
         47:70:74:d6:a3:c6:f4:1a:fc:10:b2:64:fc:57:35:57:1e:7e:
         3d:e1:c5:1a:7f:bf:19:ec:65:1f:53:ee:17:c0:59:4c:bb:97:
         66:43:29:ed:2e:7d:dd:b5:25:a3:9d:1d:65:ad:4b:b8:a3:9f:
         72:20:0d:34:4a:52:ce:54:2c:e9:e6:3f:e2:8e:91:68:0d:3d:
         82:1f:63:4f:5e:56:e5:f1:7d:77:21:6e:3a:f7:00:4c:8a:d0:
         55:d1:56:44:1b:46:51:24:2b:d6:88:e0:04:e1:01:32:bf:2a:
         d8:56:27:6c:7d:a9:ac:1b:9f:1b:33:16:19:3b:c4:5e:d0:18:
         b5:b6:1d:1b:99:7a:ad:cb:5f:2d:72:d2:0f:c3:1d:aa:60:4e:
         1e:90:65:a8:f1:32:54:eb:b9:3d:53:94:57:30:85:cb:8c:82:
         2f:1f:e5:cd:4b:eb:da:99:c7:bc:39:2a:22:66:24:34:c0:e3:
         c5:82:35:82:31:60:af:d6:73:f3:df:df:b8:39:92:22:9c:70:
         48:ed:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----