Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File:                     Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier:          mWUT3UxYqCQWgYb3gwFbgEgULpt6nOT7ZVkv0nc3SXU=
Subject key identifier:   CC:8C:AB:1B:E4:8A:35:C1:F9:A8:36:2A:54:8A:3E:96:B3:D1:04:EE
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer:       /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial:       01962F3DB7AB68C21079C494EE4BB64CFA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number:          0345
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
                          2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: bd2F+LwJ83UgCyBOeX7XZ2KmKDU4dD0yaFal6ztujug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b7:ab:68:c2:10:79:c4:94:ee:4b:b6:4c:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=cc8cab1be48a35c1f9a8362a548a3e96b3d104ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:ad:9e:f1:38:1b:c7:48:08:b9:95:c5:7f:
                    f7:b3:f7:d3:f0:df:9c:d0:5a:8a:48:37:cc:84:a1:
                    ec:27:c0:63:cc:c6:40:5e:e3:2f:75:3c:25:76:67:
                    e0:09:a1:27:61:25:f6:58:bd:53:34:d7:fc:20:d1:
                    fe:ef:25:a3:dc:75:1f:19:d3:22:8b:27:86:67:cc:
                    5d:24:68:45:3b:09:30:78:59:12:0f:db:46:24:a6:
                    50:a4:39:e0:0d:23:88:ac:87:c8:14:34:e1:58:42:
                    08:e4:02:95:4b:82:96:67:7c:0a:3c:7a:46:fb:6f:
                    bf:10:7f:a4:32:6e:a2:2c:15:43:44:96:30:8e:17:
                    5f:71:f6:fe:8e:38:87:b4:74:7d:c1:cd:e0:cc:9b:
                    1a:e4:7f:af:89:e8:b8:06:be:5c:7b:90:4a:72:3e:
                    d5:7c:07:af:28:3c:dd:58:1f:06:15:a5:05:8e:50:
                    dd:c0:dd:41:f9:d9:eb:d5:24:b6:eb:e2:cf:79:c2:
                    cd:27:fa:5e:88:6e:49:37:e4:f1:a7:02:8c:f6:0b:
                    55:e4:3e:01:cc:06:b9:b4:f7:3c:96:a8:66:94:2b:
                    81:59:3d:01:31:31:fe:c1:d2:ae:be:cb:d0:5a:4d:
                    a4:fc:8d:2e:f7:85:ab:8d:94:e1:c2:1a:ec:e3:77:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8C:AB:1B:E4:8A:35:C1:F9:A8:36:2A:54:8A:3E:96:B3:D1:04:EE
            X509v3 Authority Key Identifier:
                keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:1e:de:5c:04:bc:ee:b9:d8:31:0c:b7:0b:08:ec:a0:f7:
         5a:07:df:12:55:39:fc:ae:5f:df:1b:14:6e:04:d8:78:e3:12:
         84:73:ea:94:b1:bc:89:22:53:e4:61:0a:c6:3d:21:05:95:00:
         41:7d:b5:13:35:5c:10:90:e5:72:a5:fd:01:2b:78:6f:d9:e1:
         e2:7e:a7:6d:28:30:16:a8:21:21:d8:a2:48:64:43:75:01:f8:
         47:72:eb:a8:8c:42:64:1d:52:09:88:ef:f9:c4:5a:10:25:64:
         e0:b8:f3:50:1c:a4:bb:08:ff:92:cc:da:fa:3b:b8:97:99:6a:
         ca:fa:61:34:35:22:ca:8a:de:4f:c7:11:9b:0f:e2:64:73:49:
         b4:5a:32:68:fa:9a:1d:05:6b:a9:88:46:4a:be:20:5d:fd:75:
         c0:c2:35:fb:0d:43:97:72:f3:f6:00:22:b4:c8:0d:66:78:18:
         1c:37:90:4f:c0:19:eb:e2:ec:85:dd:b8:f0:51:8c:3b:50:11:
         a7:15:8a:09:ce:79:43:ec:03:ae:de:0b:c8:f1:13:61:3a:94:
         e3:5e:ea:97:b3:72:e8:0f:0e:ac:87:5a:2d:79:3d:77:f7:1e:
         76:42:56:03:8e:5a:33:ee:91:35:d3:6e:f8:4d:6f:9c:a0:e8:
         e9:5d:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----