Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File:                     fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier:          q1zpeaoitrKY72PGT/vDlNQn691Hrhq12eDt6lYwd/Q=
Subject key identifier:   6D:95:C4:BE:B7:46:E6:D6:36:17:F8:58:E4:02:5C:DB:F3:AF:E0:B6
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer:       /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial:       01962F0739F0F6FDF8126431AC4E777926A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=)
                          2: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=)
                          3: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=)
                          4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: /XhijF5xWzVZVAejL3di3+DzOL1IUUgB4wJu5qB5tFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:39:f0:f6:fd:f8:12:64:31:ac:4e:77:79:26:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=6d95c4beb746e6d63617f858e4025cdbf3afe0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:f7:d1:f4:75:b3:a2:c2:e6:71:c3:4c:ed:
                    c2:6d:ce:a5:94:13:24:fc:bd:86:e5:22:cd:2d:91:
                    4c:43:db:c7:a0:4a:b6:35:9b:f9:55:be:5b:bd:98:
                    c3:f4:65:43:4c:bc:09:e0:57:dd:4e:f3:df:52:50:
                    af:a6:69:28:48:23:91:9c:5a:8c:c1:05:3b:d9:04:
                    dc:47:63:33:9b:81:48:8d:62:22:b8:32:7d:6b:a2:
                    e0:77:b0:00:b6:b4:f4:5e:7b:b0:7c:07:51:04:75:
                    ad:32:ef:a1:b6:71:44:09:08:0c:fc:ad:b0:34:3c:
                    1a:ed:3d:45:02:7e:84:ee:47:b3:41:08:a2:5b:49:
                    00:85:c8:4e:f5:2d:58:37:84:8b:ac:3d:85:8c:b4:
                    c4:45:aa:ed:5f:82:c7:40:32:ac:c5:3f:2e:03:a5:
                    bb:c6:88:e1:b2:f4:aa:47:95:37:86:ae:68:30:91:
                    48:33:e1:b5:1d:71:94:ed:80:da:45:75:53:9f:71:
                    f2:3b:36:af:4c:12:5e:d0:14:ed:b9:e5:a4:20:1a:
                    d3:cb:85:28:d0:98:28:be:99:69:92:40:e5:fd:19:
                    75:e1:b6:b6:a7:94:2f:9d:08:25:18:29:dd:5f:e7:
                    74:95:f5:ac:30:a2:1c:b9:28:de:18:a8:f8:b8:01:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:C4:BE:B7:46:E6:D6:36:17:F8:58:E4:02:5C:DB:F3:AF:E0:B6
            X509v3 Authority Key Identifier:
                keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c7:fa:72:1a:48:d3:99:06:81:d0:7b:38:bd:6b:af:ef:70:
         93:61:22:89:45:f2:6c:81:76:f9:ef:14:7f:86:8e:0a:f7:3a:
         41:0c:81:30:b1:b3:c5:59:9e:d1:5c:db:0b:d4:22:a1:58:bc:
         a2:ff:8b:57:64:8a:93:f6:a3:0d:bd:50:81:e5:02:dc:f4:35:
         10:eb:95:21:7b:42:71:c4:78:db:a9:dc:19:23:69:47:e0:b1:
         34:9e:82:a6:c6:b1:61:4b:07:f4:75:71:32:54:ab:cd:37:e4:
         ac:15:4e:b4:74:33:1e:af:48:42:95:d2:e4:3e:95:93:8d:2c:
         b8:8d:a9:c2:cc:44:1b:2d:d2:24:10:d6:23:c4:1b:f5:5f:b0:
         9c:04:5d:85:2a:dd:60:8c:cd:1c:b9:99:c2:29:95:a3:65:38:
         1d:1e:34:22:ee:b2:9d:39:a8:9c:50:b7:64:99:a5:cc:67:a6:
         c2:02:58:cb:c2:6d:fa:82:0d:c0:9b:8d:c9:75:0c:36:ae:06:
         d7:d0:a6:f3:05:50:44:33:cf:8a:15:7a:34:5e:c2:8c:51:63:
         28:87:31:3d:a4:4c:5f:fb:3d:cc:a9:73:71:6e:7a:55:4c:ac:
         a4:94:5d:8f:74:32:16:40:e9:f1:3a:1b:69:43:9c:a0:9b:da:
         e9:b6:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----