Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File:                     ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier:          GJepdnqU5SBnrJE/EztsQUfoy/XJCcGLeFequ28cKFU=
Subject key identifier:   EC:0E:37:59:EB:C0:0E:01:C4:51:FB:C7:1E:40:CB:4E:11:CA:A8:3F
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer:       /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial:       01962F746232B4C9818D51D9DE5CAB57C50E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number:          05D8
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: K3iMHdAeJXfHlnnr-SFgcqXt6ns.roa (hash: UNryLkfKYrOJZtamnGSaO+ZvTx9tCb9rjtiqKaAua+s=)
                          2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: znBGEjUlF+8wTFHMB1Qdx85re5lk2+U/GLUYoDcKNxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:62:32:b4:c9:81:8d:51:d9:de:5c:ab:57:c5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=ec0e3759ebc00e01c451fbc71e40cb4e11caa83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1f:8f:e6:33:3a:b5:6b:f4:be:a9:20:21:6a:
                    d7:e6:69:75:0a:d0:78:d9:24:d0:06:bd:7e:2d:86:
                    19:6b:41:ce:c1:a0:76:c4:cc:ea:34:1b:b6:36:c7:
                    48:31:97:84:b5:e9:ac:0d:11:69:2a:77:35:73:24:
                    e7:2e:40:df:a0:68:25:a4:21:e3:4b:5c:ad:b2:b5:
                    3d:06:5f:2b:51:10:05:3f:9d:67:5e:ff:ba:38:c6:
                    23:42:84:cc:da:3e:4f:fd:71:3f:da:b5:f6:c8:2c:
                    3a:a7:36:d7:39:90:7d:3b:ff:87:b1:47:b4:2f:ac:
                    8a:99:bb:1d:30:2a:22:98:98:be:2b:fd:dc:64:7b:
                    64:4a:49:de:f0:8f:23:b1:a6:2f:08:65:da:35:7c:
                    14:5d:ee:b0:15:73:41:2f:11:03:05:ce:15:e2:85:
                    db:00:d5:9f:d1:9e:23:dd:b2:e1:af:e8:65:51:a5:
                    e2:a2:2f:23:65:c8:49:11:e4:94:80:b5:a8:7f:e4:
                    e9:eb:6d:3c:21:5e:f0:51:d1:73:99:c7:f3:c5:27:
                    1d:ba:f3:53:4b:b3:3f:5e:d5:95:9c:b9:17:3c:eb:
                    a3:38:e9:1a:9c:c5:2c:fd:27:03:56:2b:ba:15:77:
                    41:dd:c5:af:d1:20:25:55:c4:55:80:88:19:20:b3:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:37:59:EB:C0:0E:01:C4:51:FB:C7:1E:40:CB:4E:11:CA:A8:3F
            X509v3 Authority Key Identifier:
                keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:28:8b:08:18:24:fc:15:9a:8c:63:e3:cf:9e:26:b0:2b:
         b2:88:ba:3d:3a:c8:fd:80:df:ed:66:66:b9:f0:1e:51:aa:95:
         08:00:1c:69:bc:4a:d0:b9:e2:4e:d2:e8:1c:90:61:a2:f0:2e:
         c3:0e:62:b6:a1:64:e7:8c:27:11:f8:27:bc:9c:4a:e0:a6:0a:
         5d:bc:75:22:9a:2b:ec:13:65:83:b5:e1:5c:8a:dc:23:4f:51:
         bd:6e:d8:3e:d5:f9:d2:b6:a6:5a:68:59:9a:a9:30:f4:ba:19:
         d5:35:d0:e7:0a:df:5d:e2:c5:1e:92:35:9b:5b:c2:de:1f:58:
         f0:9e:0a:61:f4:ed:d7:8b:7c:ae:8d:b2:f0:10:9f:bf:06:39:
         63:e2:b3:27:e3:70:fd:d7:24:f6:a0:46:63:31:b0:73:15:c0:
         af:5a:66:91:a0:1c:e1:20:af:fe:41:a9:2e:55:1e:df:f9:0d:
         f6:a7:7a:2b:8a:a1:53:86:23:ee:f5:f8:89:c5:cc:64:a1:2b:
         9f:d3:73:d9:71:22:6a:0e:5a:7d:0d:17:4b:8c:ea:2c:c2:36:
         6f:d1:6b:31:e4:08:2b:f4:a0:8c:f0:99:45:dc:dc:77:2b:c9:
         3b:ff:1b:b6:86:9e:cf:a6:1a:80:99:72:2b:99:41:07:e7:d8:
         18:dc:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----