Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File:                     Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier:          bZF0tBau4D9r1JrdPtIZ7eshBlCds9u2xx4+XmBq1aM=
Subject key identifier:   69:79:1F:6E:1D:A8:DA:11:56:FD:34:48:EE:C1:9B:4E:92:1C:31:42
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer:       /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial:       01962F3D93739CCF207B9AA160971FFFE935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: yTyqPIiQl5hk70nngfGMFk6GvYeT2PKGmSc0iKg7cuk=)
                          2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:93:73:9c:cf:20:7b:9a:a1:60:97:1f:ff:e9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=69791f6e1da8da1156fd3448eec19b4e921c3142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:b6:22:94:eb:91:1e:95:da:35:fe:97:16:
                    ce:c7:8e:bd:ec:05:d6:5a:03:39:2a:79:12:ee:1c:
                    15:8e:8f:fe:1c:3e:0a:b2:12:2d:84:c2:5e:f3:6e:
                    d5:a4:36:a5:76:73:6c:62:af:c9:6b:60:af:03:7f:
                    b5:fd:35:e4:a2:98:d5:03:97:22:49:d2:32:cb:63:
                    92:4e:99:72:58:bd:ce:c9:b3:d5:86:7e:ee:36:69:
                    bc:bf:47:fa:dd:3f:38:28:01:4b:27:aa:64:49:76:
                    55:4f:82:48:16:1f:b7:06:77:bd:67:42:89:3d:8f:
                    36:49:f6:f5:f1:99:b3:cd:dd:ba:59:75:b3:29:ea:
                    5b:8c:8e:3b:cd:e8:7e:2d:04:24:5a:13:0f:2c:ca:
                    49:cd:08:39:63:cb:55:6b:8b:7b:96:3f:54:40:a5:
                    08:90:c0:66:b3:de:95:f1:bd:c0:af:ac:e7:3b:26:
                    d8:40:f0:b7:6e:42:be:56:d9:f5:ba:ea:03:9d:ff:
                    a2:3a:44:76:00:ff:ea:37:9b:00:65:a4:44:e4:3d:
                    fd:11:fb:94:6e:bd:99:11:30:6c:07:a0:bc:a0:17:
                    9b:b8:4f:82:de:eb:2f:0c:0d:5b:11:eb:03:18:94:
                    fe:4a:81:d5:6f:9f:e0:0c:1d:e6:92:42:3c:1c:3c:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:1F:6E:1D:A8:DA:11:56:FD:34:48:EE:C1:9B:4E:92:1C:31:42
            X509v3 Authority Key Identifier:
                keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:59:fa:70:c3:45:c3:7f:fd:f0:fc:9f:d8:b8:60:f2:9f:
         4d:77:de:e8:b1:ed:d3:81:c1:1c:72:4b:6c:0b:b5:ff:07:55:
         60:3c:fb:64:76:4a:51:62:31:c4:c8:c2:c3:a8:3d:e1:34:0d:
         64:c6:ce:be:8a:3c:36:4c:af:01:db:dc:9e:b1:81:e1:6d:38:
         95:73:cf:50:44:7d:f2:c5:bf:80:77:4b:14:38:fa:70:b5:b6:
         1b:c4:6d:ae:ac:59:ca:2b:98:d5:e2:40:0b:7f:36:f4:bd:44:
         3a:a6:8d:44:cd:c0:c3:9c:88:f9:a7:f5:cc:53:8b:82:62:35:
         a4:9b:67:8d:cf:10:81:12:23:e0:b3:0c:bb:41:25:6b:f9:8a:
         d8:b7:1c:f5:6d:e6:f5:ca:c4:6d:ba:5a:c2:8f:ce:e6:1b:c2:
         71:56:47:95:ad:66:0e:8d:a0:d1:c2:05:18:1f:b6:59:39:0d:
         c3:1a:57:60:87:9b:39:5b:0a:fe:e0:0a:fe:93:ec:49:9e:26:
         45:ee:de:1a:d8:3e:89:25:97:48:c4:c7:87:26:e8:b1:55:6a:
         39:df:68:95:30:61:22:56:b0:fe:87:a4:5c:1a:e6:94:b5:9a:
         de:2a:f3:37:22:c6:d7:90:39:f8:a5:fd:61:9e:60:4c:c0:81:
         2f:67:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----