Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File:                     87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier:          JofU+wUs9tWKbEQpO1KGtVQcodTuzGvZIsCP4nKx5i8=
Subject key identifier:   89:97:7D:6A:64:18:5D:85:54:4C:D2:DB:D7:C4:20:C4:3E:B2:45:D8
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer:       /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial:       01962E2B4F68295870277E6A66AB4A8E6E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number:          0A5E
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=)
                          2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: 1b5T1DbFmWad0ABYCouTtMUshH7Ct/bnGRzKQUbPucM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4f:68:29:58:70:27:7e:6a:66:ab:4a:8e:6e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=89977d6a64185d85544cd2dbd7c420c43eb245d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:f7:db:4f:29:c5:a5:3b:8f:59:04:eb:75:
                    d5:1c:52:40:de:37:7a:9b:9a:46:ff:74:79:ff:34:
                    4c:26:df:79:2f:fa:52:9f:da:c1:38:e1:57:ff:f4:
                    44:72:01:bc:5c:89:f5:3f:36:9d:c3:aa:09:d3:bb:
                    dc:ad:77:75:22:03:6a:6e:1e:e2:88:12:79:3a:e0:
                    b2:3f:cf:8d:c9:92:59:de:23:e8:32:c6:ad:d3:01:
                    53:23:41:85:32:b3:2c:ca:d1:8d:6d:b3:28:e8:33:
                    71:c7:3d:f9:61:08:94:b6:6b:e1:7a:06:1f:9b:a3:
                    08:90:96:25:a8:0c:b9:29:b6:56:75:61:d5:e1:5d:
                    1d:87:bf:43:e7:06:90:e2:08:05:3b:8e:72:b5:cb:
                    f5:02:62:e1:d2:e2:96:aa:3c:87:4a:51:71:51:7c:
                    81:14:ea:21:cc:c0:b1:33:58:96:2e:fc:fa:4d:d6:
                    df:df:ab:d6:57:de:8c:87:72:7d:19:e6:cc:4f:1f:
                    89:a7:53:2d:2b:6e:d1:4a:f0:4a:c0:01:47:55:ae:
                    ac:df:3f:e5:db:00:e9:46:9d:4f:65:80:69:c9:56:
                    10:c3:e2:6f:9e:d2:f7:4b:e7:84:13:d2:5d:9e:30:
                    10:80:82:16:b1:50:16:df:79:0a:50:af:62:fc:3b:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:7D:6A:64:18:5D:85:54:4C:D2:DB:D7:C4:20:C4:3E:B2:45:D8
            X509v3 Authority Key Identifier:
                keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:40:12:c9:de:5b:c6:8f:9d:b4:cb:7d:ae:b4:77:f4:db:06:
         d4:05:fa:90:91:2d:6c:f6:e8:08:c4:b3:37:d1:41:8f:64:aa:
         79:d1:f6:a0:9f:fd:6b:e7:c6:2a:8a:81:89:32:59:f8:ce:a3:
         db:64:d1:23:cd:54:e8:b4:87:1a:a3:d8:17:48:4e:84:be:e6:
         f6:80:ef:3c:5c:01:49:e1:75:98:c6:07:5d:99:6d:ac:8d:2b:
         df:34:a3:a6:a9:ee:77:20:2d:85:83:5d:54:d6:36:76:98:8b:
         e2:a0:37:c7:70:56:7e:97:62:83:92:53:e8:49:c7:ca:64:86:
         ea:2d:5a:c9:7a:0e:1e:89:45:c6:7d:b9:a6:4a:9b:01:30:f6:
         4e:25:38:0e:38:2c:9a:d2:c6:b9:74:fa:be:ca:fd:a6:20:c2:
         77:2f:66:7c:5c:be:18:f7:b0:cc:c1:47:ab:98:57:bb:4f:0a:
         e7:fe:d4:dc:cc:a4:1a:a9:a6:69:86:b7:37:71:fe:db:07:0a:
         76:e4:4a:d4:b7:b7:b4:ed:6f:7d:57:c0:49:05:7c:80:f8:44:
         8d:a0:40:d3:cd:ed:aa:06:b4:97:0c:25:2f:96:75:8a:6a:04:
         67:2c:62:bc:09:76:b9:0d:f7:42:ae:99:ac:85:19:b5:3b:b9:
         92:0e:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----