Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File:                     FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier:          klBlM1zMVNbH5IEZs+AGPOeoZ7IRxErBANVRdo8AXb4=
Subject key identifier:   C2:57:42:5F:C3:FF:EB:1D:3F:8E:93:44:AF:0D:00:4E:76:E1:8F:F6
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer:       /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial:       01962E9959238ED84EB7C0EEC619CC63E839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: AHI55nmInkTxXrjH39/QFISOxdcKuzglnOrHBqyy9rE=)
                          2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:59:23:8e:d8:4e:b7:c0:ee:c6:19:cc:63:e8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=c257425fc3ffeb1d3f8e9344af0d004e76e18ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:90:a1:b1:84:d4:3d:5f:04:b3:80:98:4b:
                    20:dc:63:ae:07:61:b0:60:77:d4:8a:5b:3d:f1:84:
                    76:2c:4b:f5:17:a9:87:7a:47:c6:9f:0e:18:8d:c2:
                    d3:46:1f:55:74:4f:92:25:5f:33:a0:58:bd:63:d3:
                    c2:2c:3b:9d:30:93:77:19:85:3a:57:ce:b5:ce:40:
                    08:1f:e9:6a:57:7f:8c:9e:be:17:ca:17:95:9b:15:
                    f2:67:97:73:8c:a1:88:25:f8:8c:98:96:31:56:39:
                    ab:d0:aa:5b:77:96:b9:2b:1e:21:ad:e3:d2:46:a9:
                    9c:47:d0:93:87:34:59:f1:84:98:ea:b1:2e:31:6a:
                    e4:b6:89:67:d6:c6:e0:c4:57:e7:3f:b2:d7:b5:d1:
                    0d:3b:8a:0c:14:7e:0f:24:88:62:40:19:70:48:f0:
                    77:42:10:1e:5c:e6:04:a7:05:93:d3:a4:8d:19:99:
                    c7:50:ec:9b:a0:1d:5d:64:a5:31:e4:ce:28:d6:92:
                    14:ed:49:db:9c:57:63:83:bc:71:c2:84:ee:7a:d6:
                    ab:3c:6a:13:ed:9c:2f:7b:71:78:80:03:48:a5:38:
                    72:b2:39:8e:06:c7:24:e2:4e:d7:8b:5c:6e:6c:2d:
                    be:8a:54:e1:a0:ed:df:1e:70:7c:3d:78:73:f0:96:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:57:42:5F:C3:FF:EB:1D:3F:8E:93:44:AF:0D:00:4E:76:E1:8F:F6
            X509v3 Authority Key Identifier:
                keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:9e:ac:96:fa:3f:17:a9:6d:c1:7a:93:f2:19:e6:0a:19:
         5b:a2:bf:94:f0:c3:1b:0e:e8:3e:77:f5:68:cf:92:ca:d1:61:
         cc:32:bf:00:96:d5:03:73:fb:21:16:e8:89:6e:54:a4:a0:fe:
         64:7e:10:25:22:06:58:cd:01:f9:7b:8d:3a:37:7b:23:98:cb:
         63:1a:ab:5c:24:28:98:6e:fe:da:58:85:39:98:1a:95:6e:16:
         02:8e:f1:5f:08:fa:f0:e6:b9:bc:fb:6a:aa:8c:89:25:65:6d:
         67:72:39:89:b0:70:da:4b:db:d2:af:e1:ae:d8:07:7d:f7:ea:
         dd:28:1b:c7:6b:b9:79:e5:24:80:a7:7f:22:85:6c:a6:6b:c9:
         04:62:f4:da:ba:a5:4a:22:46:df:f5:d8:c1:f2:fe:ff:1c:79:
         57:7c:48:00:16:ad:07:46:7d:5b:0a:a3:91:16:d4:a0:0b:53:
         37:9c:92:c2:dd:5b:e6:d7:18:e5:92:51:25:b8:cf:62:d7:b9:
         12:9e:1c:80:fd:34:31:4f:4b:6c:c6:37:19:d7:d3:10:14:34:
         cc:82:b0:96:87:53:a5:bc:bb:e1:95:11:54:d9:e7:5e:e0:70:
         be:35:46:09:eb:41:a8:dc:1a:5a:53:b5:b4:89:f7:33:e6:ac:
         a1:4a:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----