Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File:                     fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier:          ZQ899kkJzodXAs3g0BCcduZK/Eu+EZJ6+AcxBanVnXY=
Subject key identifier:   55:59:A8:E1:54:8A:93:AA:0F:E8:C8:D9:11:C4:FC:8E:A3:02:59:76
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer:       /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial:       01962DF415A504434D6D7DD1DFD05AC3A454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number:          0F59
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: c3TWUdxTpgIzJg4Nz2m3oIw9YA2mIv7vGgWw/Cj64hA=)
                          2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:a5:04:43:4d:6d:7d:d1:df:d0:5a:c3:a4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=5559a8e1548a93aa0fe8c8d911c4fc8ea3025976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:ad:b9:8b:62:2d:96:a1:73:91:41:5d:d9:
                    b0:26:3a:12:8c:37:0b:5e:94:63:75:86:5e:37:a2:
                    90:65:aa:09:1e:07:65:14:93:ce:a0:3a:1b:0a:fa:
                    ca:61:d8:87:6b:57:63:b6:34:b1:14:bc:d3:e6:83:
                    d8:ca:ec:12:8e:5b:f4:d2:a8:f3:56:af:d0:ba:7d:
                    b9:75:3b:33:dc:88:25:10:e2:fe:5e:93:39:66:48:
                    00:c4:fc:02:0f:dc:c6:e7:a9:9e:ce:6f:12:da:4c:
                    be:c5:96:9f:2c:bc:4e:e1:86:f0:7f:94:ec:0f:52:
                    55:e0:9e:92:af:63:1b:c5:2d:c7:6f:63:65:ff:e1:
                    68:4d:0b:c0:4f:a0:8d:29:03:bf:f5:5c:8e:0e:df:
                    fb:31:35:be:24:01:2f:2d:cf:7d:56:de:4f:ff:33:
                    e9:a4:5d:a3:2b:07:fe:4a:34:0b:4b:61:fc:35:50:
                    4f:ec:e9:56:ac:1b:82:b6:d3:fc:a2:56:e1:10:eb:
                    da:d6:67:71:e6:12:47:22:7a:63:d9:6f:4d:45:d7:
                    df:6f:ee:cd:59:e1:03:00:00:93:f6:3c:9f:c8:d5:
                    50:2b:e6:e1:a1:0e:82:4b:90:5e:9d:17:34:27:0e:
                    f7:6d:45:a9:37:5b:27:a3:22:7d:24:04:ac:50:db:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:A8:E1:54:8A:93:AA:0F:E8:C8:D9:11:C4:FC:8E:A3:02:59:76
            X509v3 Authority Key Identifier:
                keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f2:f9:21:66:d3:c8:1b:9f:2e:8a:51:37:6f:4f:70:37:2a:
         29:e7:76:ae:23:b4:d2:d1:1e:6d:57:8f:e7:5e:3c:2c:d7:00:
         2a:5b:6d:f3:c4:e7:d6:6e:5a:83:15:f5:df:7b:11:ad:fe:df:
         e2:1e:87:91:5a:60:3c:ed:1f:a8:c5:af:13:17:83:66:f3:c9:
         74:3e:ec:0d:39:54:bc:fd:ba:a6:9b:28:44:9a:06:f7:c8:68:
         6a:29:a3:e6:16:24:78:07:11:9a:e1:4f:75:b2:45:26:48:f7:
         2f:68:d9:ac:e5:18:59:c8:26:1a:6b:93:1f:e8:2d:46:5e:57:
         91:24:76:83:fc:4c:62:1b:9a:e0:cb:b2:71:30:bb:20:fd:be:
         96:d3:bf:41:90:21:c1:00:9a:fc:17:64:f4:24:95:57:e6:7f:
         48:ee:d4:ed:99:a7:ff:91:a1:1b:36:a3:f2:bd:c1:eb:ae:06:
         68:2f:66:63:15:3d:e9:5b:e9:b4:68:1f:a5:34:ce:21:d6:e3:
         03:65:25:fe:76:12:c7:18:92:69:11:72:4c:32:c6:db:c7:62:
         51:cc:1e:b2:35:59:c7:9b:fe:d5:13:86:b4:bf:59:ce:bc:52:
         d3:f1:67:dd:76:6b:e7:47:6e:35:e1:b8:73:a1:21:7c:8e:9f:
         d9:1a:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----