Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          nGRTzqKYsLQQavuhcw7DeB4TNqqXx0Hf4ji86k9Vh2M=
Subject key identifier:   5E:CF:BF:71:F0:C5:CA:8F:2D:DA:BE:4A:3F:68:18:5F:DF:E8:A0:86
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       01962E2AFEB31E3EB8FBB59AF49A11D569DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          0F5A
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: EfWi6MXd7hlXCr/aI3PYVWz3fshFCcVlu5nzcdECg7A=)
                          2: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=)
                          3: c053duW9yVX04hvH9uI3J-eIkE4.roa (hash: XRTPmRVBWHDOHpFSQkgtPCpg1cl8rrGstMwajzVZVD8=)
                          4: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=)
                          5: rrklfK2SIXU63eNHbLfy96DEEE4.roa (hash: MG3f+4yFLcREUv4lMpAVJXVlUxg7hDY8kaD7dmGDqvA=)
                          6: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fe:b3:1e:3e:b8:fb:b5:9a:f4:9a:11:d5:69:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=5ecfbf71f0c5ca8f2ddabe4a3f68185fdfe8a086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:b7:1a:ac:12:04:33:93:f9:72:44:14:7e:
                    a6:1c:e5:09:ff:48:92:b4:31:02:57:c7:61:9a:87:
                    bf:4d:9f:04:d7:2b:ad:61:0a:f5:a4:eb:d8:ca:83:
                    f6:98:81:7a:36:ce:9e:4d:d4:d3:3f:58:f1:9d:be:
                    31:d6:93:19:ba:af:3e:4b:61:84:98:f7:f2:62:05:
                    b4:78:94:28:a3:1d:c5:1d:cd:9d:6e:14:9e:69:78:
                    dc:cf:0b:da:53:90:9a:d2:25:52:bc:18:64:26:38:
                    2e:6f:8d:82:db:be:22:76:e8:53:92:e8:77:25:e4:
                    0d:4b:0c:cf:4a:fd:0b:d9:2b:1b:18:69:b8:0d:12:
                    75:5a:e5:8f:7f:38:fe:75:ce:75:24:b4:d4:39:52:
                    15:c4:f9:96:20:09:9e:7d:e3:03:d7:d8:1c:61:b0:
                    e7:55:36:43:16:a2:ea:ad:d9:93:8b:8c:41:97:3e:
                    81:27:25:39:5b:98:9e:8a:19:03:ab:3e:07:04:d7:
                    0e:c3:ba:59:85:dd:02:aa:87:37:6d:ef:c1:12:09:
                    b3:f6:b7:23:9f:28:52:57:d8:12:82:a0:83:eb:2b:
                    14:f5:bf:8e:23:b4:cb:43:d1:ab:45:13:94:6f:72:
                    fa:53:89:3c:c3:89:f2:4b:47:d8:e2:82:dd:33:fa:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:BF:71:F0:C5:CA:8F:2D:DA:BE:4A:3F:68:18:5F:DF:E8:A0:86
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a5:8b:23:3c:9b:a6:d5:a7:bf:3e:1e:e0:6a:c0:29:d5:fc:
         43:37:7b:8f:d5:63:23:53:01:8e:35:30:3e:72:99:80:1b:32:
         f8:ad:a1:b0:59:db:26:26:29:76:42:e9:2e:0a:7e:4f:d7:10:
         b6:88:60:76:df:1f:7c:1b:17:2c:f8:9c:8e:06:d7:12:92:b6:
         83:38:69:a7:d9:28:f4:a5:b8:56:aa:b3:f5:48:ea:54:1e:d9:
         8d:0d:b5:3f:a7:55:64:50:d8:d2:b6:1f:a2:70:ce:71:5f:2f:
         bd:44:82:e4:78:7e:ab:5c:a7:84:13:8c:91:14:1b:85:0b:95:
         e9:5d:7e:69:d2:60:f5:18:db:05:73:a7:f1:3c:be:6f:bb:d3:
         58:57:5a:8c:51:84:2c:96:1b:b0:53:db:9c:a9:34:f9:65:25:
         c5:77:7e:0f:55:4a:a7:ed:ed:a2:1b:91:5f:78:46:f3:36:81:
         e3:a9:e6:40:05:49:c7:09:cb:30:d5:24:b6:c2:c4:e6:c9:ad:
         6e:5a:9e:bb:09:7c:0f:3c:10:83:29:7e:37:1b:1d:45:00:81:
         4e:16:a1:89:93:df:54:d3:7c:a9:9a:9c:79:b5:26:a3:1a:ed:
         e9:d4:98:38:a9:9c:1c:d3:c5:66:0c:bd:df:49:ce:f6:0e:81:
         8d:3c:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----