Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File:                     fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier:          QYkyinhd0Bf/kKA4jkzWOOU+m0cyZqSIrce+DKUjXVU=
Subject key identifier:   BB:BF:51:29:7C:35:33:C9:CE:0F:B0:16:48:17:51:A9:44:CC:FD:BC
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer:       /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial:       01962DF3C1093B5CEA375A0D4B9125B56444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
                          2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: x3nfDY1XCr+EBUXJ4q+4FVvFy5rA6wCOWUJg47OFxJo=)
                          3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c1:09:3b:5c:ea:37:5a:0d:4b:91:25:b5:64:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=bbbf51297c3533c9ce0fb016481751a944ccfdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:dc:2b:e6:ba:a3:c4:40:1d:c4:dd:df:1e:
                    9b:43:de:36:e3:21:aa:13:cf:4b:8b:aa:26:9a:0d:
                    dd:c7:45:52:72:0a:5a:e7:24:1a:2f:5a:c8:72:97:
                    3c:a3:b2:78:44:c5:43:39:8c:61:fd:6e:5e:61:a2:
                    03:67:ca:a3:c5:97:38:a1:ec:34:95:17:7f:ec:d8:
                    6e:00:99:8b:1f:6d:7c:d1:82:7e:55:62:4e:8c:e5:
                    77:ac:a0:5a:c8:b5:f0:d2:ea:d9:0b:82:25:68:8f:
                    65:f4:72:b1:e4:16:cf:03:dc:6d:b6:38:77:cb:f7:
                    cd:e7:32:3a:ad:d1:21:ba:e9:99:b3:4f:c3:11:65:
                    03:87:7f:d7:65:3c:f9:39:96:69:a5:29:d8:b6:ad:
                    35:ff:de:44:05:82:a7:0f:ce:f5:7e:9b:d5:f3:4c:
                    1d:3a:a2:c9:41:d9:92:e7:b0:25:3f:35:92:20:77:
                    59:87:13:b5:bd:1b:cd:81:10:e5:01:4e:ab:c4:0d:
                    22:33:06:d3:09:65:ef:e9:13:7a:90:bc:b8:22:2c:
                    e0:e0:36:8f:5f:66:7f:a5:ce:a0:ca:7e:fc:90:e3:
                    2f:40:11:eb:15:45:61:26:b6:e1:a5:4b:9f:a7:29:
                    ce:39:48:66:2f:d0:e5:02:a6:fc:e9:69:24:06:b9:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:51:29:7C:35:33:C9:CE:0F:B0:16:48:17:51:A9:44:CC:FD:BC
            X509v3 Authority Key Identifier:
                keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cf:98:2e:8f:85:f4:b7:b2:7e:7c:58:a5:d5:f6:c9:49:e6:
         5d:62:a7:ee:6d:a5:0e:08:c7:71:0f:ad:5b:0e:53:5f:46:28:
         6d:82:d4:45:63:e1:cc:26:f5:d6:02:6e:2b:b9:26:9e:1e:44:
         24:9a:2d:1b:c0:1b:9f:c6:96:29:5e:f6:6b:a2:59:8c:92:5a:
         1e:dd:26:dd:1f:f3:23:95:cb:8a:29:38:c1:48:1c:84:51:ac:
         81:02:be:d3:25:68:eb:3e:1f:cf:8f:6c:1e:9b:5d:bc:98:5a:
         13:66:de:34:e0:bc:2e:99:6a:8f:0e:fb:02:44:36:d9:5a:02:
         72:42:8d:c3:36:78:06:a8:4b:ae:a9:02:11:b9:ab:89:a0:35:
         10:43:21:b9:3c:7c:19:d6:7a:2d:41:17:f6:82:fe:8a:a6:b2:
         a3:53:96:c0:b9:f9:59:89:71:86:20:77:02:d1:be:e0:0f:72:
         ae:5d:80:97:0d:e3:05:78:5c:35:a1:29:6e:e4:52:2e:f1:ac:
         bc:2c:7b:44:cb:51:4f:a7:ec:7f:a5:18:0b:d3:ea:d6:f6:92:
         89:f7:e2:2c:f3:e4:11:40:16:88:fb:7f:20:85:3a:01:b9:45:
         e0:12:e5:71:14:6f:a1:b2:3a:11:38:22:2b:fb:cb:02:71:c2:
         52:a8:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----