Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File:                     8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier:          Ewm0nj30+BQJeXvXA7WAjZw1E2GB/v+J7QFxM29KfiQ=
Subject key identifier:   6E:73:61:B4:9F:0C:BC:FF:A8:3E:9A:38:C8:26:80:E6:A9:17:7F:93
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer:       /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial:       01962F3DA512F8F0CBBC82491D695D9DEE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: qkqn+Le1x5ofT9s1htGgRAApjIpTfnIm9u4yDZIKHIw=)
                          2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a5:12:f8:f0:cb:bc:82:49:1d:69:5d:9d:ee:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=6e7361b49f0cbcffa83e9a38c82680e6a9177f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:70:8c:e6:58:93:4d:12:1e:43:7b:44:a2:
                    e2:bc:c1:78:d6:86:86:d7:71:b9:90:00:51:82:c0:
                    30:a3:78:34:d8:9d:b8:06:90:27:52:ed:7a:2d:50:
                    f3:32:85:f1:70:15:05:71:f4:5a:6a:82:81:d8:78:
                    da:5a:c9:06:0d:aa:fb:e6:50:d9:dd:9a:07:9b:a7:
                    79:11:13:fa:03:59:c9:8e:54:00:a3:03:c4:49:5e:
                    38:11:b6:da:91:f0:2f:26:c2:b4:e7:8e:26:e5:6e:
                    7c:d6:34:23:a1:e8:d7:a4:86:1d:23:48:73:ba:0e:
                    cf:7d:e2:dc:7c:37:d2:2d:eb:17:c9:a9:11:43:2e:
                    b5:93:14:b2:f0:00:a1:29:37:4b:ab:8d:ec:b2:18:
                    53:bf:4c:8e:50:97:6e:c7:b0:0d:2c:45:d8:86:dd:
                    dd:67:5b:f5:d2:48:f7:65:3c:3f:b6:e5:e0:45:4a:
                    31:4f:04:2c:39:aa:08:e0:eb:8c:a9:36:eb:7c:bc:
                    f9:91:6b:e1:76:f8:09:6b:0b:33:45:4c:2b:d6:6a:
                    3f:74:40:3b:25:8b:23:df:bb:a4:75:40:01:ba:91:
                    0f:f0:14:48:3f:30:d9:6d:76:71:55:42:92:ee:98:
                    46:6e:90:8b:9a:b3:95:b1:ae:81:99:fc:0f:c6:4a:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:61:B4:9F:0C:BC:FF:A8:3E:9A:38:C8:26:80:E6:A9:17:7F:93
            X509v3 Authority Key Identifier:
                keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:ea:f0:16:61:14:71:63:f7:a8:1d:a3:be:8a:a5:19:bb:
         16:b2:42:f3:d8:76:3e:78:54:87:5c:da:84:b5:b5:64:ab:6a:
         82:60:67:2a:27:40:52:4a:25:0b:3b:d2:9f:56:93:a4:46:34:
         e6:c0:e9:ad:f7:ab:9d:16:bc:2d:0a:da:68:d5:bf:ae:61:1d:
         9c:87:13:8d:37:a7:65:b8:2d:df:47:38:b1:ee:96:ec:c5:52:
         7b:b9:36:f0:53:67:64:fa:fc:16:a5:bc:24:f4:b7:99:ee:54:
         c3:4e:d1:6b:96:99:03:d9:57:4b:20:24:d2:40:cc:29:9a:9e:
         18:1d:3e:5e:3a:33:21:ed:7a:f2:e1:df:d8:eb:b9:9c:7e:b9:
         52:60:64:97:b2:81:73:b6:02:a9:49:46:e5:36:7a:12:55:86:
         f4:1e:ae:c5:59:db:ef:c2:7c:2f:8f:01:9a:bb:43:6b:72:c9:
         15:79:18:8e:27:61:64:c0:12:f7:4b:dc:2c:d3:a9:31:71:5a:
         6a:bb:07:99:c1:13:e8:bb:39:14:90:f7:fc:25:d2:7a:c6:f9:
         1a:93:ad:23:a8:3c:ae:09:22:03:2b:33:7c:80:1d:d2:be:f9:
         89:ca:1f:13:8c:eb:26:b4:61:fc:20:b4:a6:81:de:62:d6:51:
         f4:0b:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----