Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File:                     FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier:          vFm+ZhBAr0sxbpkiwRSTVlmXL6ADZate98X7BnKEcFE=
Subject key identifier:   11:FF:68:05:E9:9D:A8:7F:3C:36:2A:FA:31:B1:09:94:FC:91:40:F1
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       01962FAB892649E6416FE26B7648FAE330F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number:          1485
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: vbuyh5BoLkAy1BzYf0Zpy4+SCN78cl71Gw6+dDFqoCE=)
                          2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:26:49:e6:41:6f:e2:6b:76:48:fa:e3:30:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=11ff6805e99da87f3c362afa31b10994fc9140f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:58:ee:17:77:db:63:2d:61:5a:4b:5b:6d:
                    4b:fe:08:68:ea:c4:82:5f:ea:79:28:98:4b:f7:a0:
                    e8:53:1a:86:ae:8e:61:75:8a:c0:8d:21:6f:64:22:
                    88:9d:9e:93:a0:62:17:6b:01:e8:48:44:e4:f9:18:
                    c8:99:4a:e6:a5:89:5f:07:bb:87:4c:77:9e:89:fb:
                    4f:55:e5:e8:6b:b5:d8:95:0b:78:19:8d:6c:63:ce:
                    5e:73:7d:d4:db:5f:41:43:d3:b2:06:22:11:cc:2a:
                    84:89:aa:f0:85:88:1a:47:e8:5d:f2:bf:52:17:63:
                    a4:ae:96:ba:3d:ba:db:fd:4f:68:3f:7e:6e:c6:e6:
                    c8:29:6c:55:89:b5:2e:b5:52:5b:e2:99:0d:19:6e:
                    07:41:ac:3c:69:dd:68:1a:93:ed:69:83:f3:95:c0:
                    1a:ac:81:0e:d7:7e:ce:db:74:b0:50:14:90:0f:1d:
                    5c:08:55:90:9b:66:22:61:3e:ef:22:a1:bc:4d:f2:
                    4b:e8:41:e9:6e:fe:8a:6b:32:8d:dc:b3:53:31:de:
                    e4:c7:49:8f:bd:07:92:7d:b2:ff:dc:82:7e:e2:28:
                    f3:b1:14:77:dd:64:16:75:f0:ad:ed:94:12:1f:7e:
                    63:63:cf:5a:27:9d:07:dc:9a:67:3d:d6:1a:85:32:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:68:05:E9:9D:A8:7F:3C:36:2A:FA:31:B1:09:94:FC:91:40:F1
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:26:50:d3:62:91:a1:e2:9d:ec:e1:60:1c:86:5b:ce:78:
         ec:c5:bf:3c:5b:9d:31:66:d3:fb:ff:4f:ef:ee:97:c3:76:02:
         9b:96:44:e5:51:a8:f6:b4:36:2a:66:73:5c:80:53:8a:49:5e:
         b3:95:43:91:25:b7:e9:2c:70:9a:7c:f7:56:40:51:2f:a4:45:
         8e:b2:d3:78:60:26:fc:35:ea:26:a1:a9:a8:90:ed:c8:95:1e:
         7d:ac:54:4b:86:c0:91:40:d2:66:8f:6a:98:d9:47:f7:77:b3:
         38:3a:ad:01:1c:14:ea:1a:67:4e:47:cc:d5:67:71:55:11:9f:
         c8:96:d9:e6:e2:08:c5:6d:0e:74:a2:b7:46:90:ae:62:b6:d2:
         89:2e:81:55:20:72:f5:56:ee:1b:23:67:49:93:d2:5d:1a:e2:
         b1:54:ac:76:c6:ff:f9:81:30:43:05:30:0c:2c:52:69:81:67:
         93:a4:19:71:5a:3e:9c:4d:f5:1e:e8:39:ce:36:e5:60:38:42:
         6b:e3:86:a9:e1:67:57:44:2b:97:1b:60:0c:7c:5b:04:5d:76:
         bf:0b:00:d3:cd:4f:bc:08:26:3c:37:cc:55:b3:aa:b5:a0:82:
         54:da:1a:5c:72:35:37:8d:ce:af:2e:9d:ec:26:ce:3b:50:c3:
         f1:95:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----