Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          OxOU5KQ67WnxoW+0MOi8DlwzOcF2NbqGhjvSjLmz5RY=
Subject key identifier:   28:47:BE:1F:09:29:C7:DA:37:A1:EF:5C:97:67:15:C5:9E:18:51:26
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       01962E2B3BABE0014CC5D9E422E1606990CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          1188
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: VB4m4FB6dzbw0gROGch+OjWSsfdLzX1JuS4eR0+eoOo=)
                          2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3b:ab:e0:01:4c:c5:d9:e4:22:e1:60:69:90:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=2847be1f0929c7da37a1ef5c976715c59e185126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:e9:70:6a:c2:78:f6:0d:f3:8d:e5:90:ad:
                    63:59:dc:74:ae:18:65:00:f1:99:77:6b:d8:35:62:
                    48:fe:b6:a7:fd:3d:8b:1e:24:4a:0a:bb:b2:ae:de:
                    d9:be:c3:c1:39:e7:19:36:95:f6:99:cb:e3:ea:9f:
                    36:30:c7:37:f8:f1:d5:cf:69:03:58:0e:3e:9c:67:
                    1c:00:45:56:eb:c2:3d:c7:45:25:56:b4:ac:4f:1d:
                    bb:6a:09:87:9d:0f:e6:ab:c1:15:54:0a:c3:29:1c:
                    c8:87:84:7b:03:1c:f9:4c:a3:06:eb:90:8a:63:b7:
                    9b:6a:8f:df:1f:57:dc:26:97:b8:75:7c:78:8d:c3:
                    c4:3b:61:2e:69:6c:54:21:69:b9:3f:fc:fb:b1:39:
                    92:a7:5b:81:c9:b7:d0:7c:d6:42:68:44:f7:89:8a:
                    54:de:d0:9b:6f:c8:d8:0e:b8:7a:a2:b9:3f:89:7e:
                    09:0c:82:49:ff:7d:79:b7:10:cd:f2:37:0c:19:23:
                    d5:87:cc:29:ff:13:08:99:7c:cb:62:24:d5:af:ce:
                    88:98:ad:e5:4e:f3:86:be:15:61:4c:27:01:70:0e:
                    aa:ca:3c:87:0f:3b:00:fd:7c:4c:97:d9:fb:18:64:
                    50:27:b2:40:5a:75:81:4e:ab:55:03:a9:3e:89:ea:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:BE:1F:09:29:C7:DA:37:A1:EF:5C:97:67:15:C5:9E:18:51:26
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:c8:a0:41:bb:18:fe:6a:6c:84:50:6c:f4:d1:75:b8:dc:
         79:b0:a5:bc:cb:84:4b:c6:6e:3a:10:14:58:a8:05:00:38:66:
         6e:2b:ed:17:12:0b:20:4e:58:33:3d:a3:93:d3:91:a5:2a:bd:
         e7:8a:ec:a2:53:02:5c:7f:53:07:21:3d:56:b4:0c:33:ca:1c:
         79:54:1f:d7:cf:ea:9b:74:f6:4f:dd:c4:cc:97:a0:af:99:58:
         19:08:63:94:a1:4c:1c:5e:4a:23:31:0f:28:60:86:d1:b6:f3:
         09:38:a0:5c:12:9d:52:1b:78:b2:c8:30:ec:29:45:87:bb:71:
         fd:98:62:8b:fb:9f:7d:e8:8a:5f:37:ce:ff:7a:ee:e9:e8:26:
         41:95:74:fc:d9:a7:1a:77:87:3c:53:84:e9:fd:3f:57:8e:2c:
         95:17:d6:2a:e9:b7:9b:be:08:e4:a5:47:12:83:14:a8:2b:6d:
         07:9b:85:bc:e1:f3:02:4f:e6:3c:92:b5:26:cc:36:68:a2:74:
         b0:86:ad:29:a7:38:ba:9e:83:3e:83:29:97:47:4a:33:fb:39:
         58:d7:ee:6a:46:26:e0:7a:bd:3e:87:2d:c0:f2:d4:45:38:77:
         cb:bf:8a:c6:d4:b0:78:76:a7:0c:39:c8:03:24:cd:5a:3c:d5:
         11:b7:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----