Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File:                     R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier:          KhYWk0D4L1iDkcfRaE4FXTP1DkqDdw5xZ90K3n1ysRE=
Subject key identifier:   4B:31:FE:2C:80:87:F5:01:B1:1F:41:48:1B:D0:DE:44:1A:A0:37:83
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer:       /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial:       01962FAB874BF5C2315336CE8FDA4099F713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=)
                          2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: CUGfrTzGQi9z/1MEHhHsOStjxEIheFPScCsvRtBSRbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:87:4b:f5:c2:31:53:36:ce:8f:da:40:99:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=4b31fe2c8087f501b11f41481bd0de441aa03783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:e9:db:fe:ae:fe:43:f6:e4:9b:a0:0e:cf:
                    eb:24:63:71:f9:1b:a0:24:be:90:ab:df:57:ae:96:
                    44:2d:d5:8f:3e:ed:17:64:f4:c7:79:01:82:b9:33:
                    f7:9c:2b:6b:15:4b:d5:23:4e:18:68:99:c1:0d:61:
                    51:56:3e:86:47:25:b5:63:67:1e:16:ca:5a:a2:c0:
                    d6:94:06:26:0b:7d:45:dd:5f:5d:07:f3:19:8c:3b:
                    31:bb:b8:e8:35:c2:9b:ac:6f:0f:5c:4b:2e:d4:ac:
                    ce:ea:65:aa:ab:f7:b3:17:34:43:6e:29:39:89:c9:
                    da:d7:68:f6:8f:ec:a3:fa:10:de:2a:41:ad:62:b9:
                    f2:cd:a3:8e:08:9a:f8:4b:22:f9:80:ed:a7:fa:a5:
                    56:ee:ea:9e:2d:75:fb:5f:a5:86:69:61:93:2d:78:
                    cc:ba:c3:74:72:6c:5d:bb:9c:88:00:16:3b:e8:9e:
                    1b:b9:0e:3d:fb:1b:da:5d:9b:7c:d7:2a:de:f1:7d:
                    f4:18:c1:c9:c9:92:ee:78:21:c9:57:f5:15:10:ab:
                    2d:ba:71:1b:68:99:53:e0:80:a2:0b:9d:d2:f2:3c:
                    3b:fc:83:04:d8:bc:62:93:c5:b0:69:9f:fb:65:f7:
                    cf:b4:8c:56:50:d5:3f:11:70:e9:03:9e:70:a1:83:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:31:FE:2C:80:87:F5:01:B1:1F:41:48:1B:D0:DE:44:1A:A0:37:83
            X509v3 Authority Key Identifier:
                keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:82:0e:16:66:f0:a3:04:5d:6d:84:c9:ad:9d:11:c9:4d:
         e7:d5:45:02:5b:27:12:a2:be:9f:db:18:71:fc:42:f3:d0:fa:
         fc:19:4a:ec:4d:95:65:95:22:84:25:77:56:15:93:1f:ae:30:
         bf:74:9e:28:73:83:56:cf:e7:e2:f8:7a:fd:14:95:a7:ca:d3:
         af:48:9a:82:c6:28:0e:fc:83:15:12:ff:eb:21:50:4b:39:ab:
         f8:f9:1a:f9:45:62:dc:2c:1a:57:09:82:8e:79:52:14:4b:4f:
         a3:86:a6:60:02:35:76:51:52:ed:75:b5:b3:5b:0e:cd:76:04:
         b6:db:56:96:38:ae:9b:40:0a:6a:8d:e3:55:16:f5:c4:86:a9:
         08:7e:e7:92:c1:9b:b6:66:3f:00:8f:a2:02:e4:92:eb:19:50:
         96:09:90:32:ed:c8:03:7c:af:2e:fe:6b:a6:2e:cf:a9:99:b6:
         8c:db:2d:b9:bb:69:fb:9c:3a:03:3c:60:80:21:2a:dc:25:44:
         70:06:34:3a:f9:94:f9:8b:5d:fe:d6:bc:29:7a:42:1e:dd:f3:
         25:ee:d4:7b:0e:a1:1f:32:2d:23:a1:7f:55:1a:be:30:5e:4d:
         0f:0d:4b:aa:d6:c1:f2:7a:f9:83:36:70:ee:a5:70:d1:5d:c8:
         fd:04:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----