Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
File:                     F6ECNM-1UiqimzJgp1-Kn3mTPns.mft (raw, json)
Hash identifier:          3vR56etqGFP0uQYb8xhQxg/buIACCVcEPvzA23syBY0=
Subject key identifier:   75:90:EE:0D:DC:4D:8E:E9:E0:B3:D3:5B:B0:42:19:BD:C6:F9:15:62
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Certificate issuer:       /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial:       01962DF39513344A5A91303081BDDA614F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
Manifest number:          041F
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa (hash: yxsFQV6dBnKck8poM3ye5c/2LN+fCyAwRwDUyRgSq/U=)
                          2: F6ECNM-1UiqimzJgp1-Kn3mTPns.crl (hash: zgaSXluFa44bDKeA57KkA8qRCxoqpHqYxbnE8a2gS5c=)
                          3: X1HXVRGjUS2FqgMh5Es7IolTp3M.roa (hash: ZdR2JfGdY7ork0aTakNr5aewEZPJySl7nT5P2fOaw24=)
                          4: xT_cHkX9miZbsMvc7yYpjkfX3zc.roa (hash: MAGu+VbFwRGwGQOut2CLfQFpcWvB1OYzYgzup1WQgKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:13:34:4a:5a:91:30:30:81:bd:da:61:4f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=7590ee0ddc4d8ee9e0b3d35bb04219bdc6f91562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:6d:5a:1c:1c:16:61:1c:80:3d:d4:35:33:
                    16:49:a8:2a:3f:1d:fb:db:6c:3f:a5:d5:2e:a2:29:
                    93:0d:0e:8f:76:f4:33:49:97:5a:a5:c1:51:c3:44:
                    c3:25:9a:d8:8d:c7:2a:bc:2b:ae:21:04:b5:8d:ec:
                    6b:a8:91:a1:1c:e0:9d:4d:75:8a:91:89:91:f0:95:
                    95:bf:69:f8:ba:74:b8:e5:03:98:46:9f:88:be:7f:
                    86:c8:7b:3b:f9:fb:15:24:25:0c:c2:19:3e:43:a0:
                    28:ba:c8:24:f3:ec:2a:96:3c:3a:bf:82:e5:8e:a5:
                    fb:d9:e9:97:87:d1:ea:02:0f:51:a1:f1:af:d3:80:
                    6f:02:d8:97:e2:93:aa:e2:76:8f:26:e0:a7:3e:e9:
                    2a:1e:79:ea:5c:4e:95:5b:23:43:76:4b:a7:18:ec:
                    48:47:d9:96:6f:ff:38:22:51:38:2a:04:0f:75:31:
                    c6:23:f8:63:24:a0:a8:44:28:ad:61:77:a2:c9:d2:
                    85:6c:89:32:16:67:f1:72:4e:81:68:c5:04:a4:57:
                    da:26:60:06:64:bd:a6:c1:d8:6e:5a:07:9a:25:cc:
                    e8:d5:11:1d:e1:f3:84:60:d6:eb:0f:67:df:b7:7c:
                    d3:c1:1c:1d:6a:0e:a3:b6:b1:6c:8d:28:99:44:e4:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:EE:0D:DC:4D:8E:E9:E0:B3:D3:5B:B0:42:19:BD:C6:F9:15:62
            X509v3 Authority Key Identifier:
                keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cb:10:63:84:c4:60:76:2d:4e:be:41:79:16:97:b1:ab:d3:
         b7:36:d4:5d:8f:63:7d:ed:ae:81:25:49:69:d6:86:bc:19:f6:
         26:0a:49:36:3e:85:cb:0b:ad:48:19:d0:da:e1:e6:52:99:50:
         88:b5:11:f3:48:ed:36:69:95:3f:20:15:23:98:1a:94:ee:04:
         9e:31:c9:1c:63:13:06:e3:a0:61:d6:7e:d7:76:cd:ff:19:d2:
         47:f4:1d:7a:71:46:87:30:57:06:3f:7a:3e:38:d3:d1:a8:5d:
         bb:19:1d:87:c1:ac:2a:1d:e2:72:0d:8a:d2:94:25:bc:d1:dd:
         ec:68:b5:89:96:9d:b1:11:ec:27:d3:f3:f3:c9:e7:5b:75:9a:
         1f:a2:b5:14:50:e2:3b:0b:2c:92:bb:8c:e5:b0:47:63:dc:da:
         ec:f1:6a:ed:ae:1b:a9:1d:51:1b:a6:b7:9e:1f:39:32:8b:42:
         b8:d1:f5:74:2c:f8:61:75:9b:cd:e7:67:bb:0e:e7:cb:5c:4e:
         ad:40:ac:2f:39:d1:cf:89:b6:cb:a8:9e:fa:e5:10:00:61:fd:
         8a:2b:ae:92:f8:ca:04:41:7e:ff:28:9f:d8:0a:88:6c:15:9d:
         93:df:56:e6:3b:1e:7d:e8:f3:f5:5d:19:9a:f4:3a:73:f6:61:
         bb:61:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----