Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File:                     FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier:          tyMln1Z7iRxuD5nx0JJ8j4BRDiAoAPfc1TdpsQykh2Y=
Subject key identifier:   C3:8A:69:77:EC:A3:16:8C:65:CA:F9:69:33:7F:37:DA:55:DB:15:5F
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer:       /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial:       01962FAB1BB174E2BB4ECEADAD65BC138021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: CXmzbUonV2kQZPnNUVghPnd1+U11NLqp+NN+cVnonhM=)
                          2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
                          3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1b:b1:74:e2:bb:4e:ce:ad:ad:65:bc:13:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=c38a6977eca3168c65caf969337f37da55db155f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:b0:fc:5e:95:d5:9f:46:4e:0c:14:eb:19:
                    15:9c:f6:33:4a:8e:b3:6f:9b:f3:67:a6:91:2a:5c:
                    2c:d8:ed:14:ac:fa:67:a1:d3:43:56:2f:b1:f2:df:
                    bf:2d:31:1f:83:03:47:19:42:f2:0c:64:28:6b:9e:
                    55:e3:73:7e:45:5c:fe:99:76:ee:1f:6d:02:ed:29:
                    c7:d5:99:0e:ea:97:f2:3c:ab:e1:09:1c:a3:d8:09:
                    69:cb:61:18:68:0a:7b:8e:09:23:1c:70:55:b9:2a:
                    64:13:b2:72:42:c3:a7:66:71:db:8a:bf:a7:a1:7d:
                    15:d8:28:64:c4:2d:97:cc:82:0d:1c:b4:a8:80:36:
                    3e:f2:a5:5c:8a:0e:70:c4:20:4b:1c:cd:5f:88:5c:
                    e1:19:29:7f:1f:fd:61:ae:54:99:9c:98:c4:09:ad:
                    d1:6a:cf:76:1d:51:cb:a1:30:ff:1f:85:42:ce:2e:
                    34:b8:24:a3:9d:fa:95:52:a3:9e:bb:7d:0e:c7:3f:
                    1c:18:73:28:33:a7:ed:bf:89:78:ed:2f:fc:32:8d:
                    da:25:db:c6:5f:40:48:18:f5:3f:4b:06:e1:7f:31:
                    da:5b:d7:5e:00:45:c5:44:2a:ff:c0:0c:be:71:09:
                    91:62:a7:89:71:b2:91:03:ba:73:bc:25:26:27:f6:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:69:77:EC:A3:16:8C:65:CA:F9:69:33:7F:37:DA:55:DB:15:5F
            X509v3 Authority Key Identifier:
                keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b7:4c:3a:3e:ac:f8:f7:03:3e:ba:e6:e0:c8:4c:09:0e:31:
         ac:89:2f:96:31:25:03:22:97:fa:25:8c:f1:df:c1:ba:ef:86:
         58:76:06:27:b3:2a:53:12:7c:34:82:c4:4e:5a:67:aa:dd:19:
         6b:ae:bc:a1:f5:f1:0f:6f:06:38:68:26:f9:43:24:c7:be:84:
         53:4f:51:33:25:cf:58:1d:c8:e2:10:da:43:43:32:20:30:62:
         53:6d:f1:de:6f:69:c7:c2:88:53:9a:44:3a:64:cd:f2:df:85:
         3e:fe:ea:10:c2:6d:f3:39:dd:31:ad:82:81:27:a6:04:c4:df:
         5f:99:d4:00:ef:82:55:27:d9:7b:5d:24:3c:3b:31:f3:3c:d3:
         35:f6:2b:f2:b6:f8:b3:ac:d8:66:e9:2f:5c:d0:28:34:fa:f9:
         31:fc:53:54:c0:02:01:7e:0d:a2:6a:5c:24:2e:84:9c:80:99:
         8c:c2:5d:33:d2:04:6c:4a:b0:7a:4b:8d:b6:56:96:5d:8f:66:
         22:fb:c7:4d:1f:8d:c0:91:bd:13:1a:db:eb:ef:d1:00:77:64:
         8b:1c:9f:93:3c:8b:6f:93:56:b1:4e:90:87:b6:99:66:a9:40:
         77:98:91:35:59:28:b1:9e:18:5d:1e:c2:f1:9c:90:09:32:7f:
         51:c3:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----