Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File:                     fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier:          qpBJQ5kdXr421/k/ukDgboY2sTOTeZxQGDhfPBYvvYo=
Subject key identifier:   FD:A8:51:91:08:3A:53:8E:56:C3:CC:16:3F:40:06:FB:3E:E7:9A:FD
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer:       /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial:       01962F06690906C18B7360B5693754578333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number:          09B1
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
                          2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: kC47ACgbZaZhE5mpjZkM1QKkcJ16OD7Pc+AbRFIY2yY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:69:09:06:c1:8b:73:60:b5:69:37:54:57:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=fda85191083a538e56c3cc163f4006fb3ee79afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:a9:7c:90:0a:e4:62:5f:ce:c2:2e:59:5d:
                    b6:3d:81:d3:83:85:f9:98:3d:70:70:d9:9c:c5:f0:
                    6f:fe:04:77:61:5d:23:2f:f0:b3:ba:1e:19:fd:9a:
                    07:1f:fa:70:5a:b8:00:c0:8b:b7:94:69:c6:80:2d:
                    3c:d4:ac:fa:eb:15:20:ad:15:2d:51:e4:9e:eb:a6:
                    c6:e7:91:0e:45:f9:1f:6e:8b:28:04:02:f8:cb:52:
                    98:83:2f:2d:27:3f:96:28:2c:e9:96:c7:99:c7:7d:
                    8a:f8:f9:63:db:63:18:4b:05:22:3d:a7:bb:3d:dc:
                    f1:07:b0:62:49:f7:d5:73:d9:c3:c9:6e:b8:e0:39:
                    0e:7b:f2:f0:26:76:d3:0a:3a:de:94:9f:1d:94:27:
                    c3:84:90:fd:7f:cb:5c:7f:8f:e9:74:d1:ee:66:ec:
                    a1:fb:45:2c:5f:a4:f7:a0:3d:a1:a7:23:17:fb:29:
                    99:c9:1d:ac:08:d7:ae:35:1c:f7:78:ba:08:b8:d9:
                    c1:47:34:1c:df:ea:12:41:18:96:9f:3e:84:94:98:
                    fe:d1:87:f6:f9:a9:34:22:33:bb:3b:b3:b8:ad:7c:
                    54:d3:4b:84:b7:77:26:a0:c9:36:b6:0f:fc:ab:e5:
                    9e:35:c3:2f:ad:e4:32:75:0b:a1:99:c3:bf:49:3c:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A8:51:91:08:3A:53:8E:56:C3:CC:16:3F:40:06:FB:3E:E7:9A:FD
            X509v3 Authority Key Identifier:
                keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:bc:09:4c:0d:dd:35:7d:da:74:cb:f0:5c:9c:e5:87:95:
         6b:e6:37:e3:ac:7c:6c:cb:8c:a4:da:a6:50:c7:08:0d:eb:08:
         9d:25:bb:39:cc:d9:4f:1b:b7:b5:54:89:76:a1:f9:ec:fc:37:
         ec:6e:a6:22:2f:f9:6d:c1:6d:08:4c:a9:02:2d:e3:28:3d:9c:
         1b:80:8c:7a:c6:9f:01:d8:fd:c6:70:1f:19:db:3c:70:0c:bb:
         ae:f1:07:42:1b:37:91:18:1d:9d:ed:5e:30:d6:9c:d3:9a:1b:
         6e:23:05:bb:bf:6f:b6:72:be:eb:80:6f:79:26:84:c5:d7:f1:
         13:9d:03:ec:10:78:4a:7b:8d:54:c6:bf:4c:5a:75:a2:a9:46:
         91:75:06:fd:0f:ef:9b:9a:39:bf:a8:f8:38:bc:a0:e4:c2:c0:
         b1:91:14:79:ae:9f:cc:72:a6:29:50:25:e4:f1:b4:d0:d1:a0:
         63:f1:8e:1b:1c:4f:08:d6:02:83:07:66:0b:03:8e:1f:af:b5:
         69:f3:fe:b2:30:61:45:49:c7:b0:ee:83:ed:33:3c:4b:94:06:
         61:c7:30:41:15:b8:fd:21:bb:e2:5c:6f:ca:2c:7c:29:27:8a:
         a5:ac:86:24:36:33:bd:a7:fc:1c:52:5f:ff:f9:f5:df:98:4d:
         6d:e6:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----