Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          PG2T5PAI5pyfq2EIADz2vj/o+/aXeWTtpOQ1G+yCfCY=
Subject key identifier:   4C:56:36:EF:7E:E1:DE:4B:96:7E:2D:01:D6:5A:35:4D:AC:4A:1F:E0
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       01962FABAF11E4A16439CB1C63F5FE734617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          020B
Signing time:             Sun 13 Apr 2025 15:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:42 +0000
Files and hashes:         1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: wVDR17267O8nQiGRSIQG7PZIEdEreaDUIms81sshTog=)
                          2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:af:11:e4:a1:64:39:cb:1c:63:f5:fe:73:46:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Apr 13 15:01:42 2025 GMT
            Not After : Apr 14 15:01:42 2025 GMT
        Subject: CN=4c5636ef7ee1de4b967e2d01d65a354dac4a1fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:5b:3b:57:2b:74:cf:3c:03:82:17:70:f4:
                    fd:09:3a:da:4e:67:78:06:82:a1:cd:6c:80:38:cb:
                    7a:53:c1:39:4d:e6:16:c5:7b:b9:01:49:7a:23:38:
                    17:19:9a:f1:e6:b9:51:11:bb:a5:8e:1e:61:01:79:
                    e6:b8:40:dd:29:35:49:a5:a5:70:d0:5e:a6:63:72:
                    b0:70:aa:52:76:f1:23:4c:20:ce:86:44:dc:33:05:
                    c6:8b:5b:e5:78:eb:bc:aa:12:67:d3:21:2b:d3:51:
                    ad:56:f3:96:66:b7:87:6b:bf:4e:7e:f8:df:b6:9c:
                    9a:0a:62:de:56:07:c6:da:a7:2b:95:3e:39:2b:f4:
                    23:de:b3:00:ca:60:6a:0e:c2:e1:12:d7:d4:96:59:
                    b2:32:fc:7c:f9:87:e8:49:f2:18:9b:c6:aa:59:4d:
                    75:0a:e6:c9:eb:af:9a:47:4c:2c:58:49:e5:08:4e:
                    c9:39:9c:73:0e:8d:7c:dc:6f:59:0b:49:f8:e2:3f:
                    53:52:1d:9f:64:0d:13:f9:d5:21:90:06:cb:a4:66:
                    f5:72:44:1f:07:c1:75:51:0a:b7:e6:27:6f:0b:c6:
                    93:07:3c:9b:f6:95:73:d6:57:6b:a2:10:53:21:1d:
                    6f:93:00:3d:84:d7:85:e8:6c:ea:a0:1d:28:70:5a:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:56:36:EF:7E:E1:DE:4B:96:7E:2D:01:D6:5A:35:4D:AC:4A:1F:E0
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:b7:5d:da:75:52:6e:75:31:0a:91:12:c3:54:69:84:c0:
         81:09:65:9e:e0:d4:3e:0a:94:b8:8e:54:94:01:a3:e6:01:28:
         1e:a2:f7:1a:ce:c9:34:95:2c:e4:d3:3d:2c:b4:35:32:86:af:
         c0:b0:8a:a9:39:60:af:55:d6:8b:8f:4d:b1:16:9b:28:c4:06:
         cb:72:89:75:2f:5e:9b:fd:21:bb:a1:0d:ed:b3:24:07:44:f7:
         69:e8:20:e2:17:f2:2b:27:49:ed:ed:9c:f6:5c:e7:c2:55:78:
         ac:cc:70:b9:e4:00:b2:46:77:f6:be:ab:26:38:92:d9:07:eb:
         dd:fe:06:cb:f0:a5:e7:89:ea:43:6c:2d:04:93:88:3c:97:1b:
         4f:3a:03:a0:c1:a4:d7:a2:c5:3e:fa:f7:d7:da:02:8d:50:48:
         c5:3f:a3:23:4c:4c:6a:90:91:a1:44:16:65:5e:bc:f7:5e:a0:
         3c:c9:fe:38:50:3b:24:b2:fd:66:65:e9:98:09:2f:97:58:55:
         fe:17:51:0a:b3:3e:aa:91:2c:91:e2:f0:51:af:ae:73:0a:04:
         3e:a1:34:da:f4:5f:75:1d:d8:18:57:43:b2:3d:cb:c8:de:dc:
         01:ec:45:61:d5:2a:e2:81:71:96:78:73:1c:fc:25:75:d9:18:
         bc:8d:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----