Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          XKKlHVr3d2sH5z2CJT8rsjIgDwW94c60D7TqVYdBtI4=
Subject key identifier:   83:91:AA:1A:93:A1:38:AA:77:A5:6D:E0:70:A9:9C:B5:57:62:8A:7A
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       01962E2AE79381E58ACC8BEECADE0091EF35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          0488
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: UqqqmHsb96VUKBHSJlJw5cxVXdeuWRPvMHBDjWVO2RI=)
                          2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e7:93:81:e5:8a:cc:8b:ee:ca:de:00:91:ef:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=8391aa1a93a138aa77a56de070a99cb557628a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:e4:11:8a:27:a1:bd:8e:aa:5e:12:92:f3:
                    9b:b1:91:d3:90:80:1d:3f:75:05:08:0e:84:ba:50:
                    ff:1a:af:fb:41:ec:9e:27:b0:0f:78:93:9e:03:59:
                    9a:56:54:ae:6f:ba:e9:be:75:6b:a3:aa:ad:76:8a:
                    b4:20:1e:76:9b:e9:eb:5b:13:a6:46:2e:28:5b:ba:
                    5c:9b:49:b1:c0:ea:0d:06:12:41:22:df:2e:80:59:
                    f2:00:f7:7f:9a:89:fc:e3:c8:20:ec:73:bd:d9:f5:
                    31:09:90:81:0b:3b:bb:62:5f:08:cb:39:76:7e:ca:
                    51:d3:22:38:3d:dc:50:63:70:7f:a6:e7:e2:9e:54:
                    c2:8d:ed:79:97:97:b0:06:ed:22:ae:03:68:30:20:
                    b9:69:c1:90:ae:6d:d1:40:4a:28:39:d9:4e:8e:86:
                    2e:44:3b:d5:a6:b2:7a:d1:04:4a:0d:86:f5:e8:15:
                    41:06:ab:36:f9:38:ed:33:08:11:11:db:8a:af:b4:
                    f0:9f:05:c6:7c:e7:67:7e:f0:79:4c:e6:ab:7c:f3:
                    b4:19:5d:a9:bd:3c:07:28:31:70:08:5a:23:ab:29:
                    96:86:1e:ec:c7:df:22:3a:99:c9:c8:e3:9f:b7:d8:
                    c0:2c:36:62:a4:cc:9e:0e:f7:2a:c0:6a:40:1d:50:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:91:AA:1A:93:A1:38:AA:77:A5:6D:E0:70:A9:9C:B5:57:62:8A:7A
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:f5:d7:07:94:54:03:4d:8f:27:ca:a4:30:d5:b6:d0:3f:
         77:be:29:4d:eb:bf:5c:aa:4f:08:1a:48:22:f5:b9:7e:c7:6c:
         c8:4f:8f:4f:cf:65:25:c5:88:5c:c8:55:6a:9a:0f:4b:01:76:
         26:da:3a:31:be:3e:6a:1a:2d:7c:9a:45:10:11:af:fb:d4:20:
         af:3a:fe:e9:e3:16:65:ac:f2:07:4b:f2:50:56:84:ce:23:36:
         cf:1c:17:2e:98:3b:1d:3f:8d:5d:e6:c6:a6:df:c6:2b:48:9c:
         78:0e:55:f5:12:25:77:03:96:0c:f8:60:1a:b9:3b:4a:55:ce:
         42:50:4d:17:a5:4a:7f:57:a9:0c:ac:b6:85:cd:61:6e:20:60:
         5b:49:f1:14:65:bd:7c:7e:44:12:95:a8:64:21:01:bf:d7:f6:
         40:24:86:6c:86:27:e5:be:ab:33:08:08:57:5e:8c:4c:71:27:
         96:99:04:ae:95:16:b4:bc:c9:9f:cb:e8:8d:c2:ed:7d:8b:fb:
         42:fe:c3:f0:17:78:7c:cd:21:e7:f8:a1:ca:ab:30:fa:5f:8e:
         5c:c7:53:06:bd:ba:61:ca:09:5e:9e:d2:7c:97:78:85:0a:ef:
         89:04:60:46:cb:39:6d:46:59:3b:2e:1f:08:f2:54:ca:c2:33:
         68:7c:33:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----