Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File:                     _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier:          1TcWqC0ZgoSoyzStlss7vRjWmM8WP4tcr52K842cddc=
Subject key identifier:   F3:D9:AC:65:E0:BF:C3:00:92:6D:2C:1E:1B:3C:A6:29:6B:53:0E:6A
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer:       /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial:       01962E2AE3E26E24A27B8983E17C25E6E451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number:          09B0
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: m5ep/JlmoElTJAeLFfpubfAIQbBw/vHZr2l/wAqmnIw=)
                          2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
                          3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e3:e2:6e:24:a2:7b:89:83:e1:7c:25:e6:e4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=f3d9ac65e0bfc300926d2c1e1b3ca6296b530e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:26:1e:eb:f5:f6:90:a2:85:6f:0c:53:fd:
                    1a:dd:c6:40:58:4d:57:6b:94:61:55:20:f8:ee:66:
                    72:0a:ea:78:5c:04:97:aa:16:7f:bc:28:06:a6:5d:
                    03:90:3a:81:54:38:07:9f:4b:38:98:a1:39:05:36:
                    e0:50:21:d8:94:7b:a2:70:d8:fb:4d:d9:1e:a2:6c:
                    29:ed:35:9f:7e:10:b5:d4:88:3b:89:8e:22:22:7a:
                    2c:fd:9a:f7:f4:00:ce:ac:d5:34:ff:e1:23:d5:e5:
                    b8:08:12:1d:da:2f:c8:2b:f3:ee:d3:61:b5:fe:6b:
                    61:5d:2e:a0:45:b0:95:f9:e9:92:b3:12:be:33:5d:
                    30:42:0e:f4:0b:e6:b7:a2:ec:4f:76:72:3f:92:30:
                    97:5b:e3:bf:d2:13:61:7c:35:d3:6e:a2:2c:58:f3:
                    a6:ef:fa:16:17:05:11:03:df:b0:8a:8f:df:54:48:
                    87:bd:66:11:f3:db:10:f2:e5:b4:c5:87:f1:8a:a7:
                    04:50:f4:3b:99:53:f3:89:49:66:69:37:7a:d8:74:
                    e5:49:5b:62:14:1a:6a:b4:57:e5:91:8a:4d:d6:55:
                    d0:1d:5b:dc:b0:82:03:90:d9:30:b5:74:d9:ff:fc:
                    aa:9b:d1:a2:83:03:8c:1c:d8:42:4e:8e:0f:6c:af:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:AC:65:E0:BF:C3:00:92:6D:2C:1E:1B:3C:A6:29:6B:53:0E:6A
            X509v3 Authority Key Identifier:
                keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:7d:0d:44:a7:ee:f4:17:0f:e8:7e:25:32:40:18:e7:08:
         32:ec:21:50:7b:b3:77:1a:b2:ff:6f:72:0d:ac:32:51:67:c2:
         24:f7:f2:83:a2:fb:53:34:6c:57:6f:a0:7d:c1:29:23:3c:b9:
         64:08:56:31:05:d6:30:0c:96:99:9c:33:b8:f5:79:a2:8b:fc:
         ee:9b:71:3f:ee:bc:03:b7:7d:cf:de:1a:35:c2:03:1c:9b:b3:
         b8:77:22:94:d5:88:73:7e:d7:f6:ab:75:e3:54:a3:ba:82:f2:
         d7:16:6f:bb:e3:b5:64:70:18:2a:3e:7b:4f:1a:c5:2e:f2:bb:
         85:9d:b5:fc:c7:ce:04:5e:7a:5a:8d:e7:db:24:04:72:c2:c6:
         83:e2:00:0f:d0:84:78:29:21:b1:1d:d4:f9:2d:b8:2c:e4:75:
         c8:63:c1:21:1c:79:96:84:ff:53:40:8e:67:29:a2:d9:06:64:
         64:13:61:05:df:df:e7:f1:84:d5:5c:9b:19:86:1a:f1:b3:69:
         a0:4d:b0:cf:0f:e1:df:1a:76:92:4d:6d:84:d4:14:f4:5b:60:
         7b:3c:d2:30:40:bd:00:9e:c6:ed:b9:85:ed:55:c5:6d:3c:22:
         f3:53:c3:2b:96:0b:7a:67:79:10:ec:28:d2:8e:59:7c:15:35:
         6e:6d:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----