Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File:                     82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier:          k9ew8gMjcBCMkkp9+1cQPXjGtTUcIamQvX/KCsFSCdo=
Subject key identifier:   44:80:F4:B0:BA:27:D2:52:95:43:49:CB:33:FC:73:14:5C:63:5A:D8
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer:       /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial:       01962F06E541C97C03F2DC5EA198DC686BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: cT2QCU1dqwcSDuCIb0GGg6q3Qlmptmxd/ET9RLZNXwI=)
                          2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e5:41:c9:7c:03:f2:dc:5e:a1:98:dc:68:6b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=4480f4b0ba27d252954349cb33fc73145c635ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:d8:d3:e3:5c:ba:b6:c3:56:c8:ef:d5:b9:
                    64:cb:3b:3b:c2:e6:f5:ec:af:f0:6c:2c:24:a3:d2:
                    2c:d0:2a:ef:97:3b:10:2b:9d:bd:67:8f:36:8e:f9:
                    d6:e4:cd:12:10:fd:f1:e3:32:fd:ca:07:d2:40:2e:
                    ae:4f:75:05:36:3f:9c:2d:39:3f:99:59:48:b3:7a:
                    d2:6a:9b:c9:f9:21:d2:61:f3:28:c7:f4:d0:07:17:
                    bf:12:44:6c:4e:38:37:d7:3a:ec:da:18:e6:81:44:
                    c8:e5:95:8d:c5:47:6c:90:83:38:97:37:cd:e9:08:
                    05:2a:b6:e2:76:a8:37:5b:7f:69:94:9d:41:f2:ea:
                    72:53:b9:d5:ce:c9:70:15:ab:df:d1:fc:ee:85:89:
                    0a:8f:f4:4e:75:84:d0:c5:94:81:98:fb:fd:c7:25:
                    56:1f:0c:d0:b8:0c:98:60:87:f4:6b:26:bc:d3:6c:
                    49:78:51:06:32:2a:dd:24:c1:fe:3c:70:7f:95:8b:
                    8c:4c:db:f9:19:0e:3c:63:7d:38:9b:7d:05:65:da:
                    0b:e3:23:f7:c8:af:99:49:7c:69:10:83:ee:ba:a6:
                    f0:b8:72:ef:4c:3f:1c:9a:04:86:90:ab:3e:1d:be:
                    40:4d:07:54:61:1c:cf:ef:fe:d3:14:6a:16:e0:cf:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:F4:B0:BA:27:D2:52:95:43:49:CB:33:FC:73:14:5C:63:5A:D8
            X509v3 Authority Key Identifier:
                keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:b0:d0:76:d6:e5:c0:de:26:28:76:4a:4e:ca:52:46:b9:
         58:0a:46:cd:c7:a7:83:ce:67:b4:50:8f:ff:a0:49:95:f6:ed:
         09:07:30:42:42:66:d2:1b:9e:71:27:8b:ac:1c:f3:3b:7b:8f:
         ae:c5:52:70:3f:c6:3e:d5:71:f1:90:2f:1f:a7:52:73:d4:b0:
         00:7e:34:05:04:d8:38:c7:f4:c9:be:36:bf:fa:01:55:df:20:
         7e:8a:9e:48:67:48:7e:0d:60:41:1d:9c:27:be:11:6d:be:01:
         e3:18:71:34:44:bb:9a:31:66:60:00:bf:6d:78:be:0f:19:fa:
         93:d4:a0:0f:d0:61:01:76:a3:24:4a:2b:69:6a:80:af:8a:6e:
         be:1e:73:7c:55:a3:26:45:b9:c3:b5:ab:e8:d8:74:84:26:d1:
         4f:2b:c2:61:a7:32:c6:b4:02:ef:66:69:e2:9a:ed:79:ce:de:
         c1:39:3d:df:51:b9:89:77:db:5e:6f:32:11:5f:f3:3c:ff:fc:
         a2:36:73:9a:67:2f:a7:4c:2f:f0:0f:43:ca:c8:b0:f7:60:6c:
         8e:ee:e6:4e:2d:63:91:48:1a:37:92:f6:52:70:d5:cd:fa:40:
         28:be:42:0e:e6:9f:83:0c:09:03:af:23:42:22:42:e3:61:96:
         88:e0:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----