Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File:                     87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier:          1W/IV79z6wnXj/ZUSzMpPw+9WN+x46TLJ+SJl/BzUO8=
Subject key identifier:   B7:46:03:30:DB:F2:16:EE:DD:0D:5F:41:E4:71:9C:09:DD:18:61:14
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       01962F06B875091DE52BA94CF5357D67D639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number:          0E1C
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: 7mgafxEOxWBNjb8IMpVZjnFmzAywFqoI7AloQJTXG3o=)
                          2: _9tck5mtbi0xO7Fr7Y11NL5EZIM.roa (hash: UXCxozlRWrWF5uvq8QkTh0T+21/yBrNobwddT7TkTjM=)
                          3: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (hash: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b8:75:09:1d:e5:2b:a9:4c:f5:35:7d:67:d6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=b7460330dbf216eedd0d5f41e4719c09dd186114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:01:ce:eb:97:74:92:ea:54:a9:2e:29:44:
                    a2:f0:d2:a7:ff:dd:cc:53:53:23:67:8f:57:5a:04:
                    ab:98:6c:35:fa:35:af:6b:b7:e6:56:f6:8a:3c:6d:
                    9c:59:b0:53:cf:39:f1:33:52:5a:81:87:76:de:45:
                    9e:28:b5:22:d3:53:4f:fc:d7:cb:e9:e1:61:90:c6:
                    83:a0:6c:19:e9:da:d8:92:11:93:ab:10:4c:a5:6f:
                    70:3b:ba:fa:99:a9:78:b0:a3:4f:bc:08:1a:4e:42:
                    48:ef:f2:72:dd:15:a5:97:69:58:11:d0:03:17:3c:
                    d8:30:4b:19:69:ee:2b:b5:98:e7:b7:7c:66:e8:1b:
                    fc:79:5d:6a:bf:30:d7:d4:c8:8c:72:ad:fc:62:7e:
                    42:5d:a0:b0:fb:a6:bf:be:95:d5:6a:4b:34:7e:a4:
                    cc:95:20:9c:60:a5:35:06:d2:36:cc:a5:1f:52:41:
                    3f:e6:a8:67:8f:15:3a:73:a9:33:2b:bb:fa:ee:d0:
                    e8:ca:ed:58:8c:4a:6b:cd:25:21:2b:83:be:48:f5:
                    49:e0:c2:ce:a6:0c:ca:34:89:ed:ca:54:63:a1:d0:
                    bb:97:ab:e4:0d:e0:c5:13:61:ac:7e:2f:37:9a:e8:
                    00:ed:47:2c:4a:d2:f0:28:15:b0:c6:9e:8f:30:f3:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:46:03:30:DB:F2:16:EE:DD:0D:5F:41:E4:71:9C:09:DD:18:61:14
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:3a:b6:82:e9:b0:57:39:ec:32:79:81:dd:d4:d2:be:81:
         e3:64:9f:5b:cd:76:0e:68:9c:0c:6d:d8:00:2c:e8:6a:d0:e0:
         99:ec:ed:c7:2a:f2:db:e3:38:3d:cf:2c:4d:df:be:22:9c:32:
         c3:ab:3b:80:48:0f:56:bb:e4:03:3b:63:44:e4:b4:f2:09:ac:
         18:1d:c5:c2:a3:b0:fc:cf:64:5f:ed:9d:8e:be:40:f5:1b:1f:
         de:42:d8:92:f0:34:a6:24:5e:24:92:d7:88:c5:5b:2d:c6:eb:
         e5:4b:17:29:49:67:e3:2f:d4:2d:20:b8:d4:3f:1d:d3:d1:3e:
         de:1e:31:26:fa:e1:76:46:77:81:17:c7:62:9c:e8:1c:2b:d9:
         91:08:8d:d4:44:0a:88:67:11:f6:4e:c9:c1:01:d1:02:d6:3c:
         ba:e1:68:0d:41:5d:09:2a:3c:4e:40:3d:89:1d:03:51:13:9b:
         31:d8:7d:23:9f:88:5b:ca:47:7a:61:a4:a2:06:c4:6d:3c:5b:
         9b:a0:b7:5a:12:b0:33:29:88:9e:e6:79:8d:e9:55:87:fb:d7:
         57:a3:23:79:39:37:54:5b:4c:14:0f:19:c2:68:fa:0a:1d:3b:
         25:76:5b:b3:f9:a4:c9:e0:50:1c:03:56:bd:b8:74:40:96:0e:
         c6:a9:48:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----