Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          2zTYH6yHRmv+iUqBzdDKGks/5F+q8jBMeWFhQShb174=
Subject key identifier:   FC:B9:2C:A8:FB:CD:FD:5B:E2:74:80:02:13:52:83:BA:C0:B0:DC:74
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       01962DF3E827835A374C057D601F99B91CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: 5V3niKq6OrVS8Fp2NP/4qIRHAFgGoAZGYcDkw+4CQ6o=)
                          3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
                          4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
                          5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:27:83:5a:37:4c:05:7d:60:1f:99:b9:1c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=fcb92ca8fbcdfd5be2748002135283bac0b0dc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:62:de:30:bd:d0:b9:83:f8:5c:20:57:eb:
                    31:04:f4:40:07:45:bb:c2:09:ea:74:09:bb:70:94:
                    7a:bd:5e:c6:25:d5:15:75:6d:97:db:dd:85:0f:f3:
                    a4:03:b5:c4:cd:e0:98:cc:d3:d0:4f:ef:aa:69:4b:
                    5e:c7:05:24:01:fa:7e:3c:49:9b:c6:26:df:97:a2:
                    bb:99:a2:5a:3e:1f:47:7d:55:b1:8e:e0:73:77:96:
                    35:a8:f9:ec:63:9b:b3:ae:db:07:2e:11:3c:b3:9b:
                    50:8c:1a:82:a2:39:4a:d6:6c:58:ee:66:98:c3:98:
                    1e:eb:90:16:22:0d:fb:55:fa:eb:25:55:2b:1d:83:
                    f3:18:cb:2d:8f:24:0c:80:cd:a4:ba:21:4b:1a:0a:
                    b7:4f:c0:9c:ec:68:a1:81:22:ed:59:88:79:95:2e:
                    e2:5f:b8:44:50:48:6f:92:d9:71:ec:70:70:13:89:
                    5a:c3:89:4a:f7:5c:fd:61:8b:dd:a9:91:c8:d1:18:
                    be:cc:8a:12:3d:4e:db:a0:ba:6c:e7:69:6b:9d:bf:
                    9d:2a:e7:f5:bc:14:1f:5f:87:01:c2:39:11:6d:a3:
                    76:b9:79:4d:9e:d0:75:89:5c:6a:51:3c:6e:5e:a8:
                    cd:4f:f4:d0:2d:b0:74:5d:71:22:3a:19:a3:b8:2d:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:2C:A8:FB:CD:FD:5B:E2:74:80:02:13:52:83:BA:C0:B0:DC:74
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:43:39:42:7b:2e:08:32:a1:c0:85:77:a7:ee:8c:3a:f3:dd:
         0c:8e:69:97:f1:de:b8:48:70:10:e5:7a:a2:94:ba:b0:80:61:
         99:b7:80:9a:79:e0:a8:e1:dd:b2:c1:a1:56:a7:42:c0:12:71:
         33:77:4e:dd:64:17:15:65:66:60:3c:fa:0d:db:14:3c:49:c8:
         62:10:86:97:42:cc:c8:6b:c5:d1:d9:d6:c0:50:b2:d7:6a:c9:
         65:04:4c:77:50:58:5d:db:22:3b:5a:f8:62:8d:90:94:f8:f4:
         58:07:12:8f:13:47:41:fd:cb:57:da:97:f5:8c:a7:1a:f4:2b:
         fa:2b:e3:4a:13:c2:f0:9f:78:3d:fe:f0:bc:7d:a7:96:40:91:
         ec:9c:7b:0d:80:d4:71:b7:e5:f8:6f:d3:5c:44:e4:89:3d:0a:
         82:65:8e:fd:94:d4:1f:fe:8c:d2:c0:89:cd:b1:8d:96:79:81:
         00:a9:19:03:81:ed:81:e5:ae:69:59:42:41:e7:9c:4b:c1:c5:
         3f:0e:cf:13:62:cc:d6:23:bf:ff:e3:66:f6:54:98:f5:a6:15:
         fc:f6:05:a5:fe:0e:91:0f:92:00:31:b1:9e:61:7d:e4:35:33:
         c0:6a:d6:32:e6:21:cb:d3:48:31:9b:1a:10:29:15:3f:5b:30:
         b5:5a:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----