Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
File:                     F_V0MLEEipI6idbPoqPLO_wvElg.mft (raw, json)
Hash identifier:          S+0kKoP79/twFYVFaH657w0qTm+HmdxwHmsB1hZk+VE=
Subject key identifier:   F8:1A:76:0A:14:B3:AF:09:2C:B0:47:0B:6B:37:BC:50:1A:E7:42:0A
Authority key identifier: 17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58
Certificate issuer:       /CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
Certificate serial:       01962E6196BE93238BEFA085F5202DB1E382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft
Manifest number:          0342
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: F_V0MLEEipI6idbPoqPLO_wvElg.crl (hash: L9mXgWXRNcZ12keX8OirotKwcAvtL9dpliCtSMs606c=)
                          2: k4GHX5CM9ME-YpJS46totU42u_s.roa (hash: 17BXAFjVIDmItCUWC+3KOwfQrh8Ih46jiKww9JPT2jM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:be:93:23:8b:ef:a0:85:f5:20:2d:b1:e3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=f81a760a14b3af092cb0470b6b37bc501ae7420a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:50:e3:45:4e:b3:4f:f1:f9:57:6f:c0:f6:
                    ce:d6:cd:50:b2:89:d9:30:6f:48:4d:65:17:fc:53:
                    4c:d5:d3:18:f9:5c:73:7f:46:f8:73:ab:59:3d:b5:
                    6d:ff:eb:83:95:25:64:e5:fa:1b:68:46:6a:c5:4e:
                    17:31:58:1f:1b:59:bc:ed:e9:fb:9c:c7:c0:25:1b:
                    cd:87:16:67:4d:c4:26:d5:d7:84:2b:cb:a7:4f:05:
                    5f:de:db:f2:46:94:e6:e4:b7:f2:67:ed:a7:6d:00:
                    af:57:3c:1c:d7:c3:32:d0:19:93:40:17:9b:c9:13:
                    41:dc:42:b7:78:08:04:2d:12:a5:e8:33:dd:f1:5d:
                    76:60:4e:20:4d:26:b2:e8:c3:b7:f3:70:b1:12:e3:
                    61:39:cc:f2:98:71:f0:cf:3f:0f:a6:4b:9a:bd:a7:
                    32:ac:44:ba:3a:21:4d:1a:f7:4a:18:ef:01:0a:41:
                    b6:44:7a:6b:8a:bd:d8:6a:93:66:f2:6c:dd:9e:06:
                    25:c4:e0:ea:cf:e3:1e:26:8e:18:6a:d9:f4:d5:32:
                    4c:8e:11:ba:35:50:cc:ee:d0:7c:1d:d5:a4:ca:fe:
                    b2:cb:db:b8:d9:5e:51:3f:ce:26:c8:ee:4f:2f:80:
                    76:db:07:7d:95:c3:40:2f:60:a1:9c:da:04:4c:97:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:76:0A:14:B3:AF:09:2C:B0:47:0B:6B:37:BC:50:1A:E7:42:0A
            X509v3 Authority Key Identifier:
                keyid:17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:3f:33:b0:f9:53:9b:35:c6:b5:fe:ca:04:00:00:a1:d9:
         a5:a3:02:98:fa:84:b8:b3:64:c7:cf:e6:f8:af:97:6a:bb:74:
         b1:a5:5f:f9:08:d0:1f:9b:ef:d9:1f:e8:f1:70:49:b7:10:d9:
         04:4b:71:c6:96:d8:fd:82:43:76:65:f6:ae:4e:c2:75:94:64:
         1a:65:53:47:98:e0:3a:6d:ac:19:df:52:9b:f2:cd:7e:69:87:
         b9:31:1b:31:38:3e:79:c8:65:c6:30:e0:60:29:3b:30:bd:5e:
         97:9e:ff:1e:8e:8b:74:a5:e8:39:4b:56:54:3d:fe:4d:a3:34:
         c9:40:d4:05:14:ba:53:ed:47:5e:17:a6:3c:22:fc:99:a4:d4:
         60:93:26:6c:45:bb:ef:49:fd:30:b8:07:0a:c6:be:09:08:41:
         37:a4:cf:a9:90:b1:01:bf:5e:49:2a:c7:93:85:78:33:9f:47:
         4a:b7:ad:ad:1d:f1:76:17:8c:95:6f:7e:4a:1b:06:9e:c9:6e:
         d2:6f:a0:8c:66:c8:17:d7:fe:a9:49:eb:c0:25:aa:3c:0f:2a:
         c7:71:f8:06:14:02:0f:9a:c8:6c:ed:27:d0:22:61:6a:11:fc:
         f1:66:2f:bb:de:d7:77:5d:d7:1a:cc:9b:4a:b1:f7:1c:9a:f1:
         0e:57:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----