Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File:                     fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier:          pulsbMR3X5+0kkv47Vb736BCh3mlpyloo+v1VT8dvdM=
Subject key identifier:   9A:2C:14:F1:DD:A9:6B:58:04:21:2D:35:6A:D8:80:1E:F5:2F:FE:45
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer:       /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial:       01962E2AC54E7CEC35F5AD26677C238E20DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number:          133F
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
                          2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: +QkkAi1bPwsceEkSAzzDzXto99Z84Pn3v6yZIBa56cw=)
                          3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:4e:7c:ec:35:f5:ad:26:67:7c:23:8e:20:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=9a2c14f1dda96b5804212d356ad8801ef52ffe45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:ed:f5:ab:cf:71:4f:43:63:47:95:7a:b9:
                    41:a6:53:bd:c1:27:2a:ee:45:92:b2:e0:83:64:05:
                    a6:39:70:35:b4:bf:b2:51:ff:fe:3f:dc:07:46:8e:
                    59:37:4a:8c:96:c4:a0:72:3d:95:72:ca:5f:d7:db:
                    b4:d1:ec:f6:9a:a6:32:e6:ad:a9:dc:a1:c3:a9:93:
                    99:96:e8:4e:47:ec:5d:98:56:51:bc:d2:e6:dd:53:
                    69:3f:d0:1c:05:f5:b9:96:32:ee:56:93:e3:3a:a9:
                    d3:af:68:7d:8c:a9:9f:f6:14:ff:fd:f0:16:5e:97:
                    99:d3:d7:c8:36:09:5d:f4:5f:c9:45:0c:f1:61:a9:
                    a3:8a:0e:e4:dd:34:9e:35:dd:19:e2:6c:a5:ff:fb:
                    4e:d5:3a:ec:6d:4d:53:31:8f:b6:bb:73:f5:6a:13:
                    34:c9:54:eb:68:f5:e7:0a:d4:31:5f:e2:ca:55:ec:
                    5e:17:92:98:10:d7:4b:c2:72:84:3f:f3:a4:f2:22:
                    0f:3d:7d:a6:4d:1b:98:a0:7e:3c:79:ae:82:dd:2d:
                    33:61:3d:13:79:1c:9a:68:c0:92:45:2a:01:06:5a:
                    60:6c:b0:4c:8e:f3:04:71:4c:a9:c1:27:7f:11:3e:
                    10:38:37:1c:17:2d:b3:75:13:bb:93:36:82:a4:c7:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:14:F1:DD:A9:6B:58:04:21:2D:35:6A:D8:80:1E:F5:2F:FE:45
            X509v3 Authority Key Identifier:
                keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:c8:77:d9:67:4f:41:8f:94:81:e4:ea:64:1a:16:b9:72:
         65:40:cd:cb:ad:e2:72:d2:0a:81:c2:e4:89:4c:ce:ae:67:4b:
         c8:06:53:43:83:fd:a9:ad:fc:79:f8:68:32:0d:c8:1f:e4:d4:
         b1:82:c3:80:04:19:5a:fa:ad:aa:c7:71:86:c5:1b:52:39:42:
         3a:b6:98:b4:c9:88:cc:7b:42:da:11:d8:c5:28:cf:99:c0:4a:
         b6:94:61:b3:99:9f:b3:7c:23:cd:7a:be:d9:c9:33:2b:e0:f1:
         7d:2c:4c:23:14:f0:91:9a:fd:a2:ce:fb:4f:ed:1d:71:f0:37:
         67:a2:1d:d8:2e:3b:af:12:8d:36:90:00:96:82:f9:98:5b:d2:
         0b:cc:11:84:84:4c:b5:99:da:04:84:75:e4:46:24:61:a0:f4:
         20:12:32:4c:12:f9:6f:49:60:91:aa:94:32:05:fe:b8:b5:e0:
         2a:81:6a:09:94:5b:d3:42:06:31:37:dc:bf:73:4a:ee:1e:ee:
         61:58:0c:dd:9b:a3:4f:dc:e1:73:73:99:8f:9f:7a:2c:02:14:
         64:fd:02:85:0c:bf:67:97:94:39:21:6e:10:9b:5a:63:1a:8c:
         68:2b:f4:90:72:09:f4:18:62:31:ae:5e:86:32:38:ac:25:a0:
         c2:a1:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----