Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
File:                     1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft (raw, json)
Hash identifier:          1NpiiQna9+83ZTutQQLVJvDrunyRoyXbhbxw3CO6sSU=
Subject key identifier:   A6:F1:13:19:8D:31:0F:30:A7:56:61:41:F7:8C:23:49:7A:3A:EA:D0
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Certificate issuer:       /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial:       01962E61750512BB101E8F56592022749B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
Manifest number:          08D8
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl (hash: qsPp+zHiMA8tjzXl7ouvUqMoA4kGkxTgRhnp47yLLSU=)
                          2: CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa (hash: nPJ41a5MjCCJYxpL+ZRoeblB2rw9Ylu7iDblmReMQHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:75:05:12:bb:10:1e:8f:56:59:20:22:74:9b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=a6f113198d310f30a7566141f78c23497a3aead0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:33:51:8a:a0:ac:24:33:10:8b:a4:f6:74:
                    a9:42:c9:76:c0:59:b2:2c:49:0c:78:ea:a3:15:48:
                    46:66:7e:b1:ee:5f:b2:88:6c:f1:3a:95:a3:0d:d1:
                    9a:1c:7d:b0:4f:09:7d:e0:cd:9f:98:31:3f:93:53:
                    25:9f:2d:e4:4c:d6:6c:6d:8f:26:34:de:23:4f:b7:
                    24:fd:d7:ac:56:66:55:fe:ba:de:c0:43:dd:fd:27:
                    1d:e6:11:e8:30:fb:19:0a:4b:60:16:2b:be:08:6a:
                    19:76:b3:d1:a0:1a:98:c4:90:c2:20:b1:a2:bc:b5:
                    45:65:62:5f:b0:2a:b1:e8:ac:20:93:75:27:56:2d:
                    55:c7:44:45:82:f7:a9:37:eb:16:c4:65:bc:24:f8:
                    7a:50:32:77:cf:2f:63:aa:2e:70:ce:15:e1:e1:18:
                    bd:32:7f:64:26:5b:9e:79:1f:72:d8:e6:d5:0a:05:
                    cc:c2:9c:d6:b1:f4:cf:b7:58:07:3d:c3:7b:c7:35:
                    18:b7:56:9c:4f:03:51:d2:84:fc:2d:c7:05:d2:28:
                    b4:7f:42:b6:c0:b7:08:dd:82:b9:e3:1e:4c:8a:1d:
                    58:f7:d8:e8:86:6b:4a:01:07:7b:7c:2a:57:b8:7b:
                    9f:b6:5e:2c:1b:a0:79:54:60:f5:e5:7b:ae:ea:8c:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F1:13:19:8D:31:0F:30:A7:56:61:41:F7:8C:23:49:7A:3A:EA:D0
            X509v3 Authority Key Identifier:
                keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:28:f2:07:49:e2:f0:1b:52:e5:da:ee:63:19:3f:a6:4e:86:
         f0:4b:d4:d7:89:e4:23:0a:95:fa:73:98:b7:44:d8:f9:2c:7c:
         02:46:6e:2f:00:2f:f4:20:fd:74:b2:cb:41:a3:71:1f:f5:1c:
         fd:49:88:6c:9c:64:c6:24:1a:6e:22:09:69:5f:32:64:e3:2a:
         1b:6b:f8:e8:3c:19:66:91:ff:7d:c7:f1:db:d0:c7:55:55:86:
         40:df:85:b9:cb:09:05:bc:37:03:f2:af:11:8b:91:ce:35:00:
         a2:b8:c3:ee:0f:23:98:3d:60:48:c1:9c:a6:d1:2c:5d:37:85:
         f0:dc:ff:8b:94:19:b7:6d:61:d9:a3:f7:34:6f:ba:87:17:0c:
         b2:54:ea:7a:97:d9:9b:88:0f:a1:6d:96:fe:03:33:fe:47:1d:
         9c:cd:70:6b:20:a6:b8:49:b4:be:39:38:86:f2:75:95:2c:63:
         35:83:2a:e8:f0:31:b6:a5:e3:9e:26:2b:1d:a1:d0:ea:bc:1b:
         bc:04:87:26:5a:b0:63:bd:98:99:ed:30:88:47:c2:53:0c:bd:
         b0:57:a6:3a:c6:90:f0:7b:56:9e:e3:4f:91:be:83:da:71:6f:
         aa:dd:3c:73:22:57:06:6d:21:01:d0:45:04:c9:b4:a0:2f:19:
         1d:d7:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----