Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File:                     fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier:          Rb6AptFmBSvphqrHlCJ7sfezKkRUtYIF1z/3HxGaPp8=
Subject key identifier:   15:C4:60:37:0C:F9:4C:6E:C5:8A:B7:1D:91:6B:53:EA:64:4E:35:D3
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer:       /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial:       01962DF3C60CF28AFBBFDEFB44FC46190B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number:          05B1
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
                          2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: TA49d8FVLDdqThcDOl+yS0qajGt+yeyElzUjkKYyrFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:0c:f2:8a:fb:bf:de:fb:44:fc:46:19:0b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=15c460370cf94c6ec58ab71d916b53ea644e35d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:a7:41:a4:06:c2:0b:4f:7c:e2:04:9f:6a:
                    4d:d8:ec:1e:9d:2c:c6:e8:79:a1:e4:24:f8:f4:0a:
                    d5:08:78:2e:96:7c:49:75:3f:b3:ae:60:61:d3:b5:
                    4d:16:6e:a6:16:fc:3f:b5:ec:70:98:a6:16:48:44:
                    11:27:13:1e:fd:67:36:fb:73:7e:19:ca:ba:27:15:
                    c2:a5:fc:9b:7d:07:66:e2:d3:73:0c:ee:af:c5:15:
                    4a:ac:ff:fa:ee:91:d0:01:ef:c1:c5:b4:c7:5b:9a:
                    29:07:1f:80:8d:e5:37:c1:00:0b:8b:be:9d:eb:69:
                    d8:9e:44:56:bf:75:9e:b4:93:aa:41:70:59:ad:8f:
                    9b:43:da:ea:af:d9:a3:a3:f8:95:dc:a9:b8:e7:a7:
                    e0:dd:e2:08:14:20:a1:3b:bd:cf:00:0d:bc:8c:e4:
                    8c:83:27:e0:3f:a6:af:08:4f:33:33:98:0b:9e:51:
                    0a:3a:2c:f0:d0:a0:9d:d1:40:3f:6c:ec:d2:06:7c:
                    83:33:4e:a4:36:32:48:bf:2c:be:8e:10:e9:58:e8:
                    35:a6:cd:7d:6f:26:d4:c5:df:3b:51:f9:a9:a7:c8:
                    91:75:15:6d:f4:b0:f1:9e:60:1a:fe:03:a2:27:7a:
                    9a:4a:97:9a:93:45:f4:19:0c:7f:02:a1:51:13:6d:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:60:37:0C:F9:4C:6E:C5:8A:B7:1D:91:6B:53:EA:64:4E:35:D3
            X509v3 Authority Key Identifier:
                keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:03:1d:1e:db:8b:e9:2f:2f:6d:89:80:12:cd:da:6a:d7:b8:
         1d:2a:35:53:0b:43:70:52:33:6e:ce:7f:d3:0a:8d:c0:a6:79:
         ea:92:77:59:2a:eb:6e:c8:06:9b:a3:72:0c:62:95:25:e9:6e:
         51:ef:60:1c:20:8b:55:a6:68:31:ac:a6:ea:34:bc:94:9c:f3:
         de:94:c2:87:72:43:f0:e9:d5:df:a0:ff:07:51:c0:96:99:15:
         35:f8:a1:53:d5:54:9b:52:f9:ea:80:68:89:33:9a:88:df:40:
         d7:b6:e3:73:82:1b:90:35:b4:26:f0:32:ed:e2:0a:54:a4:67:
         bb:d4:de:6b:23:6b:f8:63:af:cb:f6:4a:89:50:29:c2:c4:c4:
         85:31:93:72:c4:17:69:94:5d:14:d8:7d:d1:74:e2:42:e7:46:
         c8:69:05:56:cb:05:28:47:26:7e:4f:96:33:4f:a2:f8:4c:ff:
         ac:2e:c4:67:27:c1:fa:4e:83:82:26:ee:33:03:53:23:f2:36:
         a7:cc:cf:bf:5a:62:18:9c:c2:4f:e7:7c:97:84:c6:c4:e6:e7:
         f1:a7:c9:79:b8:87:fc:77:61:97:0b:80:a8:16:bc:4e:d4:62:
         3a:1a:ee:8b:42:39:f9:08:91:22:ac:68:e9:20:f1:c1:7b:f2:
         79:4f:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----