Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File:                     FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier:          LFVzeiMshZvNrYhLGXLoLwrgHKFc9X80BA5wgKLY1L0=
Subject key identifier:   0D:86:CA:65:B6:90:FC:01:4E:31:DC:6B:7A:77:F6:CD:E4:78:E5:84
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer:       /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial:       01962E2AD685016655E41E3C5E40DF74C532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: +cMbpZv6Rj34wrjNQP+3j/zdVppD+geWuvR+F7AyEvs=)
                          2: U4oKE7CRqXAM5lKfColIg9RJWt0.roa (hash: d+LbRIvfnzNgLwyQ+KM7aAsPai29dP8OhpmqewNJXLo=)
                          3: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:85:01:66:55:e4:1e:3c:5e:40:df:74:c5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=0d86ca65b690fc014e31dc6b7a77f6cde478e584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:c2:fc:fa:38:8d:c3:36:23:8e:d6:a8:90:
                    95:5f:1f:9c:80:0e:13:e2:8b:28:45:85:63:90:4b:
                    74:7a:c3:87:0f:cb:2d:4a:3d:ee:6d:df:a8:4e:39:
                    62:b2:30:c9:a1:9f:34:97:2b:84:a3:cd:e3:1f:2a:
                    dc:59:69:50:9a:50:41:92:2d:41:9b:ca:c1:8c:8a:
                    01:e0:64:5c:0c:70:c9:d4:69:7b:de:ef:5f:4c:40:
                    f2:0b:85:05:e7:9f:c7:55:90:4f:e5:ff:3e:61:ee:
                    f0:3b:60:27:4d:42:9a:4d:76:38:09:ab:d8:d3:3f:
                    3b:73:b2:66:f4:ee:b4:de:2f:6c:01:7b:f5:82:56:
                    9b:1d:8e:6f:15:81:a0:1d:bb:0e:5e:ee:a0:f4:fb:
                    45:e3:ca:cc:36:f0:82:83:bd:f9:3f:76:fe:13:dc:
                    c2:ba:6c:2a:5e:f3:02:6f:72:43:c0:26:9e:eb:3a:
                    ae:2d:d9:58:5c:cf:e3:aa:71:78:cc:93:fa:40:ed:
                    ce:5d:21:09:7f:63:ee:19:1e:19:76:bf:b7:f2:1e:
                    dc:8c:c1:34:aa:68:92:17:92:80:6b:0d:06:89:6f:
                    90:11:d7:b0:76:b7:ec:c3:4b:26:85:65:8f:2d:8b:
                    72:ca:eb:6b:3d:35:c1:f4:00:fa:ce:f4:b0:17:1a:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:CA:65:B6:90:FC:01:4E:31:DC:6B:7A:77:F6:CD:E4:78:E5:84
            X509v3 Authority Key Identifier:
                keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:be:e7:55:2a:2b:c5:5d:48:9c:67:af:56:6e:36:b8:80:69:
         7c:e0:5c:13:9a:b4:24:61:ef:a1:41:c1:d9:0a:c3:da:9e:62:
         76:36:33:99:ac:f9:4b:17:71:f2:65:a9:7c:9d:e8:01:2c:fa:
         42:c5:af:35:a2:b1:b3:bc:18:30:12:b9:32:a0:2b:58:5a:9e:
         ac:85:00:03:b0:ea:6c:1b:dc:cb:41:38:5f:ba:fb:81:31:ec:
         b3:d7:74:fb:79:cc:3d:eb:92:92:d6:a6:bc:31:8e:31:e8:bb:
         9b:ce:7f:ea:1a:76:12:c8:e6:36:c1:b2:8e:04:ed:fc:a3:80:
         6c:b2:0b:e8:3c:47:eb:01:be:31:53:c5:62:0d:2c:0e:ea:8a:
         42:98:fe:2c:ab:81:e6:0f:fd:47:dc:d5:43:89:44:e9:df:99:
         be:f1:08:6b:ef:50:c3:f3:d0:75:7d:36:fc:9b:5a:78:c9:2d:
         b7:47:3d:a9:25:1a:ed:97:4f:59:57:7d:9a:19:93:50:4a:d5:
         1e:4c:b6:28:75:df:55:d7:ae:c9:3e:a1:18:12:5a:f3:68:3f:
         61:57:22:83:ce:6e:83:00:11:27:0b:38:da:c8:40:cb:99:0e:
         c2:53:cc:a9:01:b4:ee:23:d4:2c:cf:1b:18:b1:c8:ea:f9:0e:
         84:f6:59:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtaFAWZV5B48XkDfdMUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1
Zjk2YzIwHhcNMjUwNDEzMDgwMTIxWhcNMjUwNDE0MDgwMTIxWjAzMTEwLwYDVQQD
EygwZDg2Y2E2NWI2OTBmYzAxNGUzMWRjNmI3YTc3ZjZjZGU0NzhlNTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM7C/Po4jcM2I47WqJCVXx+cgA4T
4osoRYVjkEt0esOHD8stSj3ubd+oTjlisjDJoZ80lyuEo83jHyrcWWlQmlBBki1B
m8rBjIoB4GRcDHDJ1Gl73u9fTEDyC4UF55/HVZBP5f8+Ye7wO2AnTUKaTXY4CavY
0z87c7Jm9O603i9sAXv1glabHY5vFYGgHbsOXu6g9PtF48rMNvCCg735P3b+E9zC
umwqXvMCb3JDwCae6zquLdlYXM/jqnF4zJP6QO3OXSEJf2PuGR4Zdr+38h7cjME0
qmiSF5KAaw0GiW+QEdewdrfsw0smhWWPLYtyyutrPTXB9AD6zvSwFxr93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2GymW2kPwBTjHca3p39s3keOWEMB8GA1UdIwQY
MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt
ZTM2ZThkMjkzYWUwLzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw
LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL7nVSor
xV1InGevVm42uIBpfOBcE5q0JGHvoUHB2QrD2p5idjYzmaz5Sxdx8mWpfJ3oASz6
QsWvNaKxs7wYMBK5MqArWFqerIUAA7DqbBvcy0E4X7r7gTHss9d0+3nMPeuSktam
vDGOMei7m85/6hp2EsjmNsGyjgTt/KOAbLIL6DxH6wG+MVPFYg0sDuqKQpj+LKuB
5g/9R9zVQ4lE6d+ZvvEIa+9Qw/PQdX02/JtaeMktt0c9qSUa7ZdPWVd9mhmTUErV
Hky2KHXfVdeuyT6hGBJa82g/YVcig85ugwARJws42shAy5kOwlPMqQG07iPULM8b
GLHI6vkOhPZZJw==
-----END CERTIFICATE-----