Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File:                     FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier:          AbePbvm2jmvFas63pLpdywCzO4gzoCAz9hu8/Ew4OCw=
Subject key identifier:   D7:7F:8D:E6:D2:96:7D:AD:56:E7:5B:2B:EB:68:60:45:95:6D:0E:B4
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer:       /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial:       01962E61943BC4F51C1D74226AD1A0C805C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number:          0BDF
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
                          2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: xg82ZfO3QPd8J5f64r9vujhVurUyJ8UVc0LvUlowX1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:94:3b:c4:f5:1c:1d:74:22:6a:d1:a0:c8:05:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=d77f8de6d2967dad56e75b2beb686045956d0eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:c0:39:48:43:59:81:37:2a:39:2b:46:78:
                    51:87:18:83:ba:67:73:09:26:64:d5:00:9c:54:33:
                    0f:64:47:bb:64:ae:ab:6c:75:8e:84:e4:72:9c:e9:
                    2a:a5:72:7f:27:c3:1e:26:37:e8:24:96:2d:97:a3:
                    c3:f6:09:7a:61:d8:11:47:0e:cb:1d:78:bc:e9:92:
                    fc:a8:83:fc:9a:16:14:eb:29:63:cf:37:7e:82:98:
                    90:f4:8e:a2:48:5d:94:6e:1f:08:9f:9a:e2:76:a9:
                    a6:1d:b5:48:6e:3b:77:b8:5d:fe:6c:58:8c:2c:38:
                    9f:a1:b2:85:b0:9c:d3:57:88:83:ed:db:7a:4e:82:
                    44:ce:ae:c3:14:30:bb:17:81:f8:fe:56:04:82:0f:
                    3a:b0:94:51:20:5e:7e:28:c6:d3:ac:6b:76:e9:fe:
                    2c:48:89:95:f6:d1:f2:9c:43:9b:a3:98:af:da:3d:
                    49:5b:e0:24:f0:d0:8d:d2:f5:3d:ba:50:0d:63:44:
                    36:e8:e7:77:0d:99:4f:50:9e:13:88:a4:fc:bb:59:
                    05:0e:3c:16:2c:23:0b:38:30:3b:cc:1d:4b:2c:1a:
                    25:77:47:26:f3:27:19:6c:90:fd:bb:92:e3:7e:61:
                    0e:5e:e9:f9:94:39:c7:1c:b6:fd:bc:f3:36:0a:83:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7F:8D:E6:D2:96:7D:AD:56:E7:5B:2B:EB:68:60:45:95:6D:0E:B4
            X509v3 Authority Key Identifier:
                keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:74:ac:78:2b:a0:6f:e6:b2:df:0a:61:01:15:45:55:62:53:
         f4:27:8f:fd:79:50:7c:40:4e:92:62:0d:c2:e3:85:48:83:09:
         6f:51:a2:58:3f:bd:b7:08:45:24:54:41:35:19:98:ca:25:8e:
         7a:d8:fe:81:46:b6:e8:68:1b:e2:a5:f4:8b:01:cc:9f:3d:dd:
         65:29:e8:ae:00:f7:4d:84:89:8d:22:5e:3d:de:fb:fb:80:6b:
         19:04:6f:35:17:8f:53:45:b9:d4:28:1b:d8:14:34:a6:e9:0d:
         05:ca:06:5e:68:3c:5f:37:25:67:a8:49:a7:40:25:2f:22:b4:
         3f:92:5b:34:5b:e8:65:d3:a6:8e:b0:83:7b:ac:c7:ab:80:01:
         fe:69:32:82:b1:41:71:92:a1:35:93:f0:06:b4:11:28:39:1b:
         b8:05:62:ed:38:d9:93:76:67:f0:dd:7a:ba:f4:af:2e:9c:e4:
         2b:11:23:81:4f:a4:e1:ad:04:ed:3d:7c:42:a6:e8:69:80:f7:
         57:3d:bb:24:63:de:cc:ed:f7:1c:0b:84:eb:67:fb:b4:29:70:
         79:1c:12:f0:6d:88:b8:e8:7e:ac:37:02:d2:35:31:c7:4d:cc:
         83:55:80:21:bd:55:55:a5:88:dd:28:89:6b:32:97:8a:89:7f:
         5e:e5:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----