Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File:                     cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier:          fB+fRoYAn2OpYBozXTsU4/6P4Y2SrSms2/pxdQ8n2go=
Subject key identifier:   2D:4B:B8:34:A4:E3:C0:97:8C:43:5A:06:94:E3:4F:F7:40:22:AC:E5
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer:       /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial:       01962E9964D50F0A395856BE0AFEDD058E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: lKUCn2W8X1/uzuFRTnTW9jDag1DXqMwLRnpfFEqzjCk=)
                          2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:64:d5:0f:0a:39:58:56:be:0a:fe:dd:05:8e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=2d4bb834a4e3c0978c435a0694e34ff74022ace5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:22:f8:27:0e:06:60:da:ba:28:cc:dd:17:9d:
                    75:0e:8e:b7:46:24:4e:30:32:63:14:16:5f:6a:18:
                    33:b4:56:94:be:6d:0f:83:1f:84:ea:d9:ef:d3:20:
                    d2:db:0e:d6:ee:7e:3f:30:da:08:31:10:f7:b2:7d:
                    6d:3d:f5:df:22:23:07:1e:87:e6:f2:50:c8:1a:60:
                    66:e3:08:74:8b:a1:20:3c:ec:f3:94:eb:3b:c3:91:
                    0f:6f:48:2a:cb:4e:b3:52:e0:8e:74:27:e5:cc:3b:
                    d2:e5:c6:c8:a4:e6:3c:b5:4e:f0:6c:2a:10:5c:98:
                    14:8e:c5:ea:c4:e4:98:d5:4c:59:1c:89:58:65:70:
                    b9:7d:c9:6b:f9:46:a9:5f:1b:ee:b3:bf:20:0f:5a:
                    ca:09:c9:e5:8d:a8:4e:48:2b:23:92:2b:69:fa:be:
                    09:b0:d5:a3:ec:b8:af:0c:b3:0a:a7:13:c5:da:08:
                    56:fc:b2:9c:1f:95:b2:1b:55:81:42:0c:63:68:4c:
                    d5:44:ad:66:86:a6:bd:e3:e0:20:8b:30:53:98:29:
                    73:86:19:51:ca:60:8e:fa:f9:3d:48:f6:e3:39:7f:
                    e1:1b:28:e9:ec:1b:43:00:dd:19:f4:04:0b:62:a9:
                    66:4c:50:5b:5c:cb:ed:3d:b0:81:3b:ef:01:9e:e1:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4B:B8:34:A4:E3:C0:97:8C:43:5A:06:94:E3:4F:F7:40:22:AC:E5
            X509v3 Authority Key Identifier:
                keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:66:52:50:87:c1:db:be:fc:99:0b:2c:86:41:5e:a0:64:
         b7:84:56:45:45:23:7a:d3:8c:f9:ae:7e:ff:de:0d:d0:f3:0f:
         bc:ef:18:5c:b7:4d:5c:a0:4a:c5:1d:69:3a:63:b5:08:b1:b6:
         60:c3:b9:85:53:fa:10:51:56:74:75:f7:be:26:52:a7:14:11:
         1c:e0:7c:ca:c9:e5:1a:7e:f4:4e:d3:d9:8e:2d:ec:a4:e6:49:
         a5:bd:72:39:c0:ae:12:f3:51:f5:10:a1:b1:ad:34:de:83:b4:
         b0:a4:f1:42:f9:da:df:e4:c5:97:10:67:e5:5a:b5:04:91:74:
         95:c2:a1:d0:20:95:14:27:d1:cc:07:c1:fa:34:b6:dd:3c:8f:
         81:38:ae:aa:92:f4:be:3f:12:1d:d1:ab:23:0e:09:23:ba:0e:
         41:bf:c8:09:6e:9f:9f:e0:e8:fe:46:1f:d1:80:c6:88:d8:c1:
         4b:c6:5b:03:fc:fb:b9:06:9b:20:4a:c1:bc:4a:fa:91:ed:8d:
         ff:c0:0e:41:a0:d6:00:7a:4a:27:e6:c4:ac:16:25:ea:61:19:
         9e:dc:b0:c0:75:f1:38:b0:56:23:e4:81:d1:35:ba:81:a9:46:
         72:86:cb:ff:8a:5c:7c:7e:7d:01:82:31:28:56:b4:94:42:0a:
         de:c8:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----