Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
File:                     _AUWm-THSVJnJZffED7rG0e7aKM.mft (raw, json)
Hash identifier:          IUMEloP62qEqhn5zbEjGFp1sBzhAZUGKIlfIkFwp+L4=
Subject key identifier:   D5:25:18:C6:FD:2A:0D:7A:78:20:AA:1A:8A:AB:82:C2:5E:25:5E:FF
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Certificate issuer:       /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial:       01962F3D6B361863A7A5F47B92CB7E6902D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
Manifest number:          1468
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: _AUWm-THSVJnJZffED7rG0e7aKM.crl (hash: OggBcuJ1irorjf9UJFMcinl/T7SYjglsz/yXninefdg=)
                          2: qjBjdrunKiTcPXqIE7s1xh7dwEw.roa (hash: uHoSIY7qke5jgdqqvLbgYTxS1uVZNz+Tj5AJ31INqCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:36:18:63:a7:a5:f4:7b:92:cb:7e:69:02:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=d52518c6fd2a0d7a7820aa1a8aab82c25e255eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:af:a6:c6:9a:ee:4e:2a:98:65:58:4a:e6:
                    ea:28:de:75:db:c8:ca:be:13:2f:39:79:bf:9e:24:
                    c4:47:71:5e:7b:3c:71:57:17:bd:eb:f0:d5:1c:9c:
                    10:50:2b:bf:9f:66:78:8b:3d:62:ab:3a:64:02:1e:
                    5a:85:d4:dd:a8:10:3c:67:2c:d6:83:9c:81:f4:e9:
                    07:1a:83:90:ec:b6:93:d5:dd:20:ac:95:15:52:15:
                    ee:08:ef:86:4f:1b:17:ef:ba:63:9b:d0:c4:05:9f:
                    ac:c2:56:95:92:76:0c:73:ca:bc:a7:3e:0a:e6:3a:
                    4e:50:89:95:81:81:87:77:d6:f1:b3:54:31:2c:60:
                    a2:52:44:5b:0f:63:82:62:78:c1:7a:10:39:4f:82:
                    70:e3:4d:4e:22:af:64:60:dd:e7:07:db:1c:cf:d3:
                    ff:81:4f:df:20:db:62:3d:9f:02:4b:4a:81:aa:fd:
                    ad:20:3e:84:a2:43:7e:e3:05:54:1e:06:15:7b:c7:
                    d1:57:f7:ed:79:c9:18:0f:40:73:e3:80:fc:17:b2:
                    37:93:9e:8a:51:1c:65:8f:cc:90:17:02:d1:6f:24:
                    15:ba:f3:b1:16:6c:bc:7e:fb:48:05:55:61:39:d3:
                    a3:0a:aa:07:1a:12:81:4e:0d:a5:b0:1c:65:f9:d1:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:18:C6:FD:2A:0D:7A:78:20:AA:1A:8A:AB:82:C2:5E:25:5E:FF
            X509v3 Authority Key Identifier:
                keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a4:a0:f0:19:cd:0c:51:68:52:62:24:c8:4f:f8:1e:e1:85:
         d4:f4:85:a8:41:58:70:3b:d4:2e:67:c6:88:b0:c6:72:ba:ac:
         a5:7d:9a:26:61:a3:c3:d0:85:09:fd:9c:41:a1:53:5f:74:9e:
         a9:df:0d:78:1c:1f:f0:ca:31:01:e2:08:ce:0d:38:05:a2:55:
         78:a3:93:c4:53:fe:9d:e9:77:2c:9f:2f:98:09:42:61:8f:ca:
         77:56:67:b2:cd:48:db:13:77:e2:0c:8b:b3:81:47:90:3c:f9:
         4f:5f:64:8c:76:e0:9f:bd:1e:8f:30:06:d7:59:ef:e8:f4:50:
         11:81:8d:a2:74:04:27:82:9a:5f:09:fc:f9:b9:87:74:6a:05:
         85:48:45:cd:db:a7:a4:f8:a5:07:51:76:e0:02:84:16:ab:08:
         23:eb:47:f7:a0:7b:c2:2a:b8:ad:b3:2d:f4:80:e6:0d:52:2a:
         31:45:23:27:ec:a9:39:75:4c:18:e8:b4:46:f4:a9:9e:02:00:
         71:c9:29:30:52:94:e9:24:7a:7a:31:55:b5:5e:ae:c7:07:21:
         48:d2:4b:94:4f:4a:e0:62:a0:c4:5c:d1:09:c7:47:cc:b8:a7:
         71:56:96:19:4c:29:eb:57:48:eb:0d:fd:79:21:47:2b:76:34:
         61:8c:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----