Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File:                     1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier:          HeBDHIDOEyWl05wEzh1uHnTzZ9ncERapzXHgTAJtUSc=
Subject key identifier:   17:77:00:74:BF:D6:E6:CE:C2:B3:E0:A3:D4:69:7A:CB:7F:FF:BB:04
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer:       /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial:       01962DF3DDCFCFF0EB200BB1CB7A24DFE19B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: 98n0emPAayIegojJQ4zHrJTilhO3EiQwKZ1YIwVz4pk=)
                          2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dd:cf:cf:f0:eb:20:0b:b1:cb:7a:24:df:e1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=17770074bfd6e6cec2b3e0a3d4697acb7fffbb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:c0:96:b3:b1:e4:ae:92:00:39:d9:eb:10:
                    3a:9f:b6:5a:3c:16:f0:73:13:f6:24:62:8a:42:b8:
                    a8:83:1c:8e:1c:7a:7a:04:1f:36:2c:ad:21:3a:c7:
                    2a:85:85:fb:c8:53:e1:0f:85:c3:49:9e:d3:1e:c3:
                    49:51:e2:e4:c4:95:53:43:f1:8c:42:3b:d3:b6:13:
                    48:d6:95:b2:cc:3a:64:a7:b1:f2:e0:7a:3d:7b:3b:
                    1f:33:c4:a2:99:33:2e:0c:62:a6:ee:c1:4c:0d:00:
                    96:51:68:67:e2:6a:1e:7d:31:91:46:15:dd:3c:c8:
                    1c:f9:ca:4a:12:f7:41:64:c7:b0:50:27:bf:83:d3:
                    0e:82:de:2a:fe:cb:dd:3b:1b:a7:e3:91:06:27:51:
                    c1:ca:1d:9f:17:9c:7f:d2:d3:08:a0:00:ad:14:67:
                    cd:e0:5d:af:f6:1d:33:01:cb:11:35:e6:67:29:5c:
                    99:34:c9:e3:16:e2:3b:58:0a:f0:c3:17:e1:89:e0:
                    8e:c7:59:ff:27:7a:e2:15:f5:0d:a2:09:56:30:01:
                    55:fd:0b:66:97:a9:78:1c:94:19:4c:66:2b:7d:b7:
                    e6:62:9f:8d:1d:08:86:ff:a5:8d:92:48:b6:f9:fe:
                    ee:3b:f5:6d:60:84:1f:ee:90:55:b1:ca:59:04:6d:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:77:00:74:BF:D6:E6:CE:C2:B3:E0:A3:D4:69:7A:CB:7F:FF:BB:04
            X509v3 Authority Key Identifier:
                keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:14:10:40:27:6b:bb:2d:88:0a:9b:8c:7c:b7:3e:44:03:
         0a:29:ea:1b:3c:6f:92:e9:7d:24:66:54:f5:65:10:78:f0:45:
         1f:89:22:5c:69:c5:b8:ee:62:f3:fe:6c:d9:33:bf:85:f1:90:
         59:08:e2:f8:40:13:85:69:7a:93:07:b5:15:60:89:9f:42:ef:
         a0:a5:7d:05:57:1e:11:6e:6a:d4:02:81:83:5f:df:b5:cd:ce:
         60:e7:47:27:53:84:43:cc:59:6c:79:69:45:fc:ab:dc:e0:8c:
         26:00:fd:6c:53:aa:d6:d2:5a:a2:16:22:45:a1:a6:1a:f6:6d:
         eb:b1:c7:76:df:8c:2d:d8:4d:44:62:56:74:5f:eb:77:5d:2e:
         5a:28:aa:00:0f:55:7c:5b:d7:b7:8a:65:c5:e7:16:5c:ba:88:
         69:3f:2f:a6:b3:4f:a3:3e:79:d9:2c:d7:aa:a4:be:1b:28:9f:
         7e:ba:7e:7e:4a:33:40:22:f2:e0:64:4d:9d:ca:34:4e:56:d0:
         4d:3c:8e:6e:81:0d:13:40:28:ca:48:43:c9:8a:70:3b:05:ad:
         7d:da:e2:2d:be:32:83:fd:ae:13:7b:b4:ff:0d:e9:81:8a:92:
         0f:2e:9d:8a:a8:74:a5:65:67:0a:f1:41:d3:81:61:68:b6:95:
         55:61:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----