Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File:                     FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier:          eQbvde/8j8cXenC7IQoiEhkxu9MNUIkqk2hn3YGu+co=
Subject key identifier:   8F:AA:A2:0F:08:41:CB:3A:2E:D1:18:FD:67:57:D9:09:9B:AB:87:81
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer:       /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial:       01962FABA816D4C44255BECB0D491AE27CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number:          14D1
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: k4jdpHi94THPdn8R/XLNfoZdDY8ErEW42kJ1HXWfceY=)
                          2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a8:16:d4:c4:42:55:be:cb:0d:49:1a:e2:7c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=8faaa20f0841cb3a2ed118fd6757d9099bab8781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:39:79:e6:16:de:b8:10:12:30:89:f2:f8:
                    2c:cc:44:2d:a6:42:00:f9:b7:6e:0b:58:1e:49:9b:
                    d0:d9:0c:be:0d:42:80:72:93:7e:4a:40:04:b1:d4:
                    d4:5f:b7:10:bc:51:79:3f:b7:68:fe:ad:b8:bc:16:
                    03:1a:12:e3:09:8a:a6:23:c1:42:ad:c7:b1:34:b4:
                    78:09:2c:fc:5e:30:b8:08:06:5b:3c:36:8c:89:34:
                    56:ea:3c:3c:68:7c:64:c2:97:ec:e3:56:7b:e5:82:
                    0e:a8:9b:e0:df:3c:f8:a6:7e:e1:ec:ff:eb:5f:42:
                    97:60:35:71:fa:16:4e:d5:50:6a:2d:ad:f9:73:8e:
                    ea:5e:a7:85:d8:e1:50:9c:6c:fe:6e:ae:69:da:18:
                    5a:61:b6:7a:e0:fa:46:2e:73:f7:b4:d7:0b:54:4c:
                    38:b2:e4:4e:bb:b3:fd:7a:03:3a:25:c1:06:76:13:
                    ec:57:38:54:ef:a8:18:a8:89:b9:75:2e:5d:f9:44:
                    bf:94:78:62:af:59:6d:ae:20:c5:96:81:b7:93:d9:
                    2a:5e:01:f4:6b:31:90:17:54:22:17:ec:ec:9e:98:
                    cb:f0:7b:6f:83:d6:a3:08:77:42:8c:ef:8b:c3:d2:
                    15:81:8e:ca:6c:4a:34:1c:0d:08:cf:a3:df:06:7a:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:A2:0F:08:41:CB:3A:2E:D1:18:FD:67:57:D9:09:9B:AB:87:81
            X509v3 Authority Key Identifier:
                keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:f1:f4:82:c5:3e:a9:13:35:d8:c0:f3:3f:a1:f7:8e:25:
         94:1c:fd:cb:a7:5c:52:80:9e:e2:2d:a8:c3:99:91:85:81:4e:
         1d:c5:ac:2d:f1:b6:35:2d:00:2a:bf:52:04:94:81:32:fe:c6:
         da:0b:1b:25:18:98:df:c7:4b:47:48:35:aa:27:84:d1:d6:fd:
         02:f0:72:5b:57:34:3b:3a:ac:75:c6:b6:a6:8c:7c:63:74:55:
         33:55:48:82:75:2b:6f:47:1c:8d:ef:a6:57:be:a3:25:f2:98:
         5d:0e:a5:2a:b4:d7:56:cb:89:25:1e:1f:df:6e:62:ef:25:d8:
         b0:47:8a:59:de:55:43:b1:0c:72:8b:33:a7:9e:f5:0c:03:6c:
         15:10:9f:53:7c:1b:8b:33:fe:3a:1e:83:d0:01:12:11:32:04:
         11:0c:71:bf:dc:b0:0b:62:4c:57:94:fc:ec:99:0a:1b:5b:8e:
         d4:50:e4:6d:da:3a:b4:b5:2b:58:0c:46:80:92:c0:2f:a2:de:
         d8:1a:0c:1d:b9:9c:36:6f:de:23:a3:05:f2:d4:59:26:83:b5:
         3b:e0:4a:3b:08:58:6e:8c:1c:fc:d4:82:af:42:86:50:4c:3b:
         7c:66:28:ab:dd:15:d2:6a:0d:89:c8:b2:af:c3:62:2b:bc:74:
         d1:91:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----