Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File:                     FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier:          prvfRv98VN7IVTAIk41PsptDuJGtWAPuvVEsZQuZ2SY=
Subject key identifier:   82:F6:14:63:72:0E:0A:70:0D:30:6A:D1:F4:D2:24:4E:F1:DD:2E:72
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer:       /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial:       01962FAB25A7959CD1637D796F857A1027E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: pNF/W8/dkR0FY52ZyAf1yr0HyQjcF/6dsV4WDsqg6xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:a7:95:9c:d1:63:7d:79:6f:85:7a:10:27:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=82f61463720e0a700d306ad1f4d2244ef1dd2e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:fc:fd:0d:9e:dd:94:c2:14:be:95:8a:42:
                    45:3f:38:c9:34:60:d6:88:dd:8b:74:5c:c1:be:b6:
                    bb:15:fb:2b:39:5e:27:d1:3b:96:2d:00:47:6f:ae:
                    b2:28:05:9c:94:0b:fd:81:3c:e9:73:14:ab:4e:e1:
                    62:c1:03:41:f5:20:9a:98:24:35:3b:e8:ae:31:a2:
                    94:8f:06:ad:bc:e1:3c:6e:bf:ef:03:57:7c:29:fb:
                    14:b5:bd:6e:6a:b2:42:32:ca:1d:cb:0d:80:d9:78:
                    98:7c:55:c4:8f:8e:06:fb:f9:a7:a7:3b:ae:ac:af:
                    d2:8d:2c:43:ad:32:c5:be:80:c1:61:28:11:1d:8a:
                    12:de:01:f8:19:10:a3:2e:a5:37:51:95:29:fe:eb:
                    a5:94:e6:ec:cd:53:d2:ae:06:0d:16:98:3b:01:a1:
                    31:18:a3:0b:a7:f4:ea:52:2c:8a:f8:70:c9:9c:1d:
                    28:dc:36:c8:9f:5a:ca:4d:d7:df:a5:76:dc:af:8d:
                    c2:82:41:af:d2:d9:b2:8b:78:9f:ac:49:ea:02:36:
                    b8:67:f1:d1:5c:e9:41:53:da:a4:87:96:fc:8e:1e:
                    0b:3c:b0:ac:e0:19:1f:05:66:0d:2f:4d:58:0e:6f:
                    62:2c:53:7f:c9:4d:05:69:89:f1:ec:fa:f0:97:f0:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:14:63:72:0E:0A:70:0D:30:6A:D1:F4:D2:24:4E:F1:DD:2E:72
            X509v3 Authority Key Identifier:
                keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:0e:46:cf:d2:cd:1a:09:ce:65:be:87:c1:bc:5e:cd:e7:
         dc:74:66:77:2f:95:95:21:92:83:fd:90:6a:ed:11:fd:d5:1e:
         c2:2c:49:19:5c:9c:c2:3a:ab:63:b3:36:80:a4:d0:fe:7b:b8:
         32:00:cc:01:95:f5:88:1e:60:a9:35:a9:d9:98:4e:e0:93:9d:
         20:e0:32:7e:f2:9c:81:4c:06:3f:11:30:6f:9b:61:f2:26:f8:
         d8:6f:bb:7d:81:fb:71:ba:6e:71:ee:b0:d9:51:22:48:f3:ac:
         68:7b:71:04:c9:61:51:65:47:28:63:53:a2:86:cc:83:69:e3:
         39:58:dd:11:fe:09:ff:44:8f:aa:79:5a:0c:a1:05:56:62:3e:
         f1:3a:47:82:87:5c:d6:bf:05:d3:66:f0:b3:ad:a4:51:0e:34:
         7f:86:e6:fe:6f:c0:5d:7b:a1:7c:4a:04:2e:2b:93:ab:42:51:
         3c:24:43:8e:4f:39:a4:34:86:ff:f1:6d:2e:25:c9:4a:c2:b5:
         1e:39:41:80:94:29:80:cd:20:0e:31:47:67:0a:ec:07:2b:17:
         7a:0c:bc:f2:7b:c1:85:4c:5b:c1:6f:13:eb:69:30:cb:17:9c:
         73:bd:96:3d:e6:d7:b3:0f:11:91:c9:b7:10:2b:c7:ab:95:df:
         61:29:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----