Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File:                     8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier:          OJfZwUcOitdk/xZYryh12/8SNwR9tuQNKhOzPAaetfc=
Subject key identifier:   E3:7B:DB:F2:46:4C:80:28:C4:81:46:CC:C1:F9:99:6E:8D:48:1D:8E
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer:       /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial:       01962E61743B12310891236E561D90C0CC33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number:          0894
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: 8h9EQd52dspY9ZGUu6C3UtifOk177+rA1KgscYWVboY=)
                          2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:74:3b:12:31:08:91:23:6e:56:1d:90:c0:cc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=e37bdbf2464c8028c48146ccc1f9996e8d481d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:b9:14:bd:b6:a3:c7:a6:cd:c9:27:32:89:
                    87:2e:b9:0d:cc:6c:93:c7:46:ba:b5:16:34:66:f8:
                    fa:38:a9:7c:00:63:63:a4:40:8a:c9:db:41:93:c8:
                    56:78:0d:07:18:20:bd:c5:1d:9f:f4:b1:7f:6b:e7:
                    a5:31:b1:b6:5f:51:3e:bd:d7:46:7d:1e:61:12:f7:
                    39:f5:21:5f:25:5d:93:b6:33:e7:7a:2e:c2:11:90:
                    5d:da:a2:1a:0c:c9:4e:f0:87:29:0e:f5:cd:0a:43:
                    66:e0:e2:82:c5:17:d6:6a:46:fb:e8:24:0e:e8:bd:
                    9e:b5:ba:5a:d0:7b:16:22:f9:87:6e:8a:6d:9c:fa:
                    db:b5:3f:c7:31:3f:ea:8d:ef:9e:fe:72:fe:c4:5b:
                    1e:0b:a8:48:45:9a:5b:c3:dc:0c:7b:0d:ce:7a:b9:
                    f1:5f:02:80:c3:76:d9:d9:bb:01:3b:db:e3:80:17:
                    af:32:54:9e:2b:1f:f8:53:1a:da:ac:f1:77:2d:32:
                    d2:f4:04:ab:2a:fd:43:65:43:88:4b:7f:62:0b:f0:
                    78:74:8d:ab:4f:80:d2:7a:0e:c6:8d:26:66:c7:93:
                    99:de:12:92:b3:53:11:be:45:74:25:b0:fd:fe:9d:
                    44:5d:56:38:d3:5b:0d:bb:27:21:37:4a:0b:c9:a2:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7B:DB:F2:46:4C:80:28:C4:81:46:CC:C1:F9:99:6E:8D:48:1D:8E
            X509v3 Authority Key Identifier:
                keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:c6:4a:d2:df:62:14:a7:b5:9c:1a:ea:2c:fe:21:74:7f:
         bc:3d:20:a9:93:77:06:77:4a:b9:e7:c4:f0:be:08:c1:36:aa:
         f3:4d:7d:cd:9f:d2:3f:22:50:3e:ab:a6:f5:f6:f3:05:02:a6:
         5e:47:7d:cf:bc:a9:bd:26:3d:f8:89:1e:32:28:a5:62:cd:73:
         36:01:23:39:75:be:17:7f:0f:f7:bc:11:b9:a3:fe:88:ca:58:
         f2:c0:2b:76:d1:dd:e3:45:ec:61:9a:4d:f0:af:30:ec:87:9e:
         a2:95:1d:cf:dc:ad:f0:82:ce:89:29:ab:1b:a3:d5:12:c4:60:
         e8:19:52:0a:4d:cd:3c:0a:fd:f3:94:7d:a3:64:c0:f9:9c:79:
         ab:db:1f:be:02:da:ac:b4:e4:5a:8a:e7:eb:dc:66:8a:59:26:
         73:4e:d2:5a:d1:0f:87:dd:10:5f:ef:20:50:63:40:d1:03:3f:
         2b:ff:cd:e3:88:91:b9:0e:0f:31:2e:8b:82:f3:a9:62:63:79:
         3f:dd:ce:ff:b0:45:77:f7:0f:e1:bc:c2:a4:ae:ea:37:5d:a1:
         d8:53:fa:3e:46:30:6e:56:cf:00:24:17:00:37:a8:2f:a5:87:
         02:82:39:c7:f0:f9:b5:77:c1:0c:59:27:cd:e7:e8:b9:58:23:
         62:d6:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----