Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File:                     8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier:          P6QR8IqcNHwMO0Xiq/ExWWAXUEs9qkzfackL1Cdtpuo=
Subject key identifier:   F0:51:B7:63:B8:FA:01:7C:9E:91:42:B2:81:40:3D:09:2A:CE:09:35
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer:       /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial:       01962E2B093CCD2A1287FB843225E029FDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: fast4D7Jcu7tFJViYPRk4EyOTXsgRYSu7Ahn9gqyolo=)
                          2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:3c:cd:2a:12:87:fb:84:32:25:e0:29:fd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=f051b763b8fa017c9e9142b281403d092ace0935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:b4:ce:53:7f:01:6e:e6:c2:42:38:4f:00:
                    a8:c8:07:69:62:dd:99:93:41:f2:ff:e1:b7:2a:d0:
                    cd:03:a2:19:9b:46:b5:59:1d:c4:0c:15:ae:a8:56:
                    7d:7b:d4:4b:ed:82:a0:21:7d:c6:1c:fe:1c:46:77:
                    6b:ba:50:bc:a1:5d:0d:fc:43:ae:24:9e:52:2b:dd:
                    29:1c:71:ae:4a:35:6f:9d:6c:19:42:11:75:d8:bd:
                    ba:e7:24:05:37:bb:6b:75:c6:1f:6e:e7:5b:88:48:
                    99:70:cf:c0:1b:0a:52:ad:e6:00:36:78:bd:58:d5:
                    29:17:b0:4a:97:2a:e4:47:78:ae:9f:2c:40:8f:2c:
                    17:0c:06:1d:6d:a4:00:b7:7b:15:01:25:54:5f:1d:
                    b3:95:24:f0:be:cd:fc:27:19:29:ea:21:32:e6:a7:
                    4b:11:3e:40:80:f6:9b:21:c4:71:82:15:07:4e:01:
                    69:f6:b1:14:26:99:3c:ec:f3:90:09:83:01:eb:f2:
                    c0:7f:fe:47:13:6c:46:f0:ec:db:90:02:22:88:51:
                    0e:f5:18:4a:2a:64:d0:e5:c7:ec:47:46:f5:a3:ec:
                    e2:ce:61:bf:ad:7a:9b:c6:81:7c:48:49:d7:28:04:
                    fb:41:8e:ac:56:66:6f:48:32:ca:80:c5:fe:59:08:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:B7:63:B8:FA:01:7C:9E:91:42:B2:81:40:3D:09:2A:CE:09:35
            X509v3 Authority Key Identifier:
                keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:69:49:73:98:f9:82:a0:82:21:0b:c1:04:20:2a:f4:15:
         dc:87:3e:3b:5c:28:fd:70:52:50:f3:5b:25:3c:67:f4:09:f6:
         bf:2c:20:f0:3b:5e:a3:62:1c:e1:47:5c:2d:42:5b:fa:f6:f0:
         22:93:35:59:28:52:b6:7e:26:84:10:ef:9e:a7:42:3b:5c:a7:
         e9:eb:38:0a:ea:6f:de:e4:67:28:36:1e:a7:0b:f4:5b:38:59:
         6c:e1:ec:fc:f1:95:79:4e:fe:c7:b7:a6:33:75:be:ea:93:ff:
         bb:13:67:1b:cf:b2:16:eb:bf:4a:dc:14:77:e7:93:07:8e:76:
         7c:70:e2:3e:b9:9e:f0:e2:82:35:a8:72:a5:df:8b:8c:d2:e6:
         28:ea:23:e3:b3:81:b6:67:dd:ff:26:f7:72:f3:0a:13:9b:06:
         ba:a3:2f:d6:2a:09:ad:34:e1:8e:bd:3a:ff:aa:2c:76:b5:7d:
         b0:88:cd:3e:e0:db:91:2b:37:41:42:b3:5e:f2:f8:0a:df:bc:
         53:ba:21:f9:36:22:04:31:73:3e:bb:96:dc:85:e7:64:cc:39:
         c9:df:91:7d:3d:62:31:f4:38:03:5e:75:16:e4:76:5a:7e:00:
         36:a0:45:9c:66:6c:03:6f:56:03:37:67:e0:48:50:ba:61:c0:
         fd:b7:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----