Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File:                     fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier:          fvut/QG0XFJapx+ijnPbg/RkP+Pc/e9I9PHp7HhT6B4=
Subject key identifier:   38:61:C4:FB:8E:EA:CD:81:81:CE:68:F8:2B:A2:8C:DE:48:AC:29:D8
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer:       /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial:       01962FAB319C319FDA18196182ACD15720CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
                          2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: NeOy3x4yPK9VuigKRyi+htvucTLYZIw27Ww8CiHmst8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:31:9c:31:9f:da:18:19:61:82:ac:d1:57:20:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=3861c4fb8eeacd8181ce68f82ba28cde48ac29d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:a5:d8:da:64:83:f3:d2:a0:6f:58:91:5e:
                    74:fe:b8:93:99:9a:01:2c:90:6b:66:fc:4a:5c:7a:
                    28:fc:e2:f8:f0:5d:fd:04:9f:7c:eb:9c:21:44:51:
                    62:c2:67:25:a0:a2:7b:3b:13:74:7f:2d:27:a5:db:
                    43:5f:e8:ec:fc:ba:62:26:8e:b0:81:00:1b:30:a3:
                    6f:f3:75:38:cb:38:20:64:b4:51:81:9b:55:cf:bd:
                    07:5e:2e:ff:2e:6d:0d:f6:7c:07:f8:d2:81:be:47:
                    18:32:80:97:37:54:e8:23:53:c4:da:7d:6e:ad:a1:
                    08:b9:fa:78:9a:64:17:01:e5:ae:46:91:3f:be:7d:
                    a7:61:af:02:9e:3f:20:25:c1:ac:0b:b7:3c:39:e7:
                    12:b0:bb:b8:84:89:78:c1:ad:75:e9:5d:19:75:d7:
                    63:13:69:1c:c2:cb:1f:8b:d0:d5:b5:e0:ce:ae:30:
                    dc:e1:73:90:70:7d:6b:67:fc:d7:ab:48:a5:24:41:
                    9b:64:69:56:50:31:13:bb:65:99:82:7a:ac:92:45:
                    83:14:06:ce:b0:12:c5:c0:1b:01:98:4b:27:85:88:
                    fb:32:80:f5:4f:f5:63:8a:86:7a:2f:0b:f0:07:99:
                    19:0a:9b:4f:ea:ba:88:56:5f:03:23:1b:52:ee:ec:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:61:C4:FB:8E:EA:CD:81:81:CE:68:F8:2B:A2:8C:DE:48:AC:29:D8
            X509v3 Authority Key Identifier:
                keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:94:3c:71:b7:df:86:07:98:41:9c:d9:f4:81:80:13:34:
         01:de:df:73:8a:cb:36:5a:f8:c3:ef:9a:5c:4c:8a:b6:82:a1:
         c5:85:59:8b:0c:fd:ba:f7:58:89:59:d2:df:f3:e6:01:33:e6:
         66:62:4a:7c:3f:c4:57:41:70:27:bb:fe:0a:6b:f8:6b:60:f8:
         70:ec:71:4a:d9:bc:4c:75:82:3b:16:6e:90:29:9a:cb:60:ca:
         d9:e3:05:34:20:72:d5:ad:78:3f:47:4d:c7:98:49:2b:31:93:
         f3:40:83:6c:b1:eb:29:5c:ec:a1:84:d5:8d:38:16:b0:8e:ce:
         b0:41:6d:67:64:c4:16:51:d4:4f:a7:77:35:db:82:57:cd:74:
         ba:d9:65:16:c5:91:34:f9:53:30:9b:77:16:7a:b1:43:27:c6:
         03:e5:55:14:ec:01:d4:64:af:b7:5d:44:7a:6b:58:68:39:e6:
         5b:c2:1d:d1:b3:a2:34:0d:24:61:f6:48:f0:fc:f1:cf:12:0b:
         a3:57:8b:a8:4e:30:d4:f1:ca:ec:ac:7a:a3:f7:17:79:e5:3e:
         69:9a:c7:05:8a:ea:32:c1:89:7d:53:34:95:ff:e2:b6:41:ab:
         c2:03:70:12:32:df:ca:5e:a5:92:d0:e1:35:84:89:b0:ae:fb:
         5c:6f:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----