Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File:                     FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier:          Q5ae3oWK9rvRA1FD6tlfk2tR5gmqnFcGz2uRwTPf2XY=
Subject key identifier:   24:F4:FC:AF:B6:D8:F3:C0:45:E4:31:8F:DB:BF:FF:EB:21:78:B9:57
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       01962E98BF928AFD559FD50AE5909806C826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number:          0DD6
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: 4OQXaGSiXOGwzfMv2ZKquswo7F+8cZJ0ppG2H+qyLZ4=)
                          2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
                          3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bf:92:8a:fd:55:9f:d5:0a:e5:90:98:06:c8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=24f4fcafb6d8f3c045e4318fdbbfffeb2178b957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:7c:75:85:a0:93:82:4e:32:c7:56:fd:4c:
                    ab:d9:a0:c9:34:0f:5f:ba:b1:9f:fa:58:7a:17:3c:
                    7e:58:df:66:78:07:c0:cc:f1:38:4b:13:23:d1:f8:
                    f0:39:8b:c5:37:55:d9:96:6c:31:5d:78:f6:1e:de:
                    f4:b2:86:8f:f0:5d:54:fb:71:d1:3d:89:16:cf:4b:
                    c4:19:16:6d:fd:c8:b3:d8:55:a6:34:84:2a:06:61:
                    68:0a:de:f0:bc:1f:9a:a5:53:e4:8b:71:2d:3a:19:
                    ea:18:8e:d9:99:6d:bb:e5:2c:52:03:1c:aa:42:57:
                    a2:55:c8:d5:39:99:29:1b:92:41:33:bf:66:f0:1f:
                    a1:ef:b2:ce:1d:6b:7f:5a:0e:21:f7:99:5f:06:1c:
                    d1:b4:e6:04:ad:6b:26:09:d2:c9:a7:67:32:9e:28:
                    2e:56:eb:30:c0:d5:db:88:9b:d3:a0:a0:4b:ca:f3:
                    0d:79:39:7c:6d:c8:d9:d6:c9:ef:5c:81:9d:9a:b6:
                    cd:46:40:eb:5a:ba:83:0e:7c:d7:49:87:d3:72:6b:
                    3d:a7:cf:de:46:2a:e2:01:01:0c:4b:f2:80:04:24:
                    c4:14:b5:61:58:31:8b:8f:3c:25:b0:e7:6d:69:5c:
                    7f:68:2e:30:77:ba:03:57:d2:ec:16:7d:db:36:b4:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F4:FC:AF:B6:D8:F3:C0:45:E4:31:8F:DB:BF:FF:EB:21:78:B9:57
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:58:4a:c5:3f:a0:92:c5:eb:0b:0c:87:9f:c7:14:4a:da:
         68:bb:3e:55:bd:be:fc:ef:6e:81:aa:38:1c:8b:92:59:21:21:
         ed:d2:1b:69:92:94:f0:9c:06:de:ca:89:6c:ce:33:89:d4:c1:
         d6:80:5e:5a:4a:e1:c7:6c:d0:56:cf:d0:70:f3:c4:ab:92:55:
         b8:eb:ab:3a:de:28:b4:93:8e:22:8f:a5:ad:fd:35:5f:ab:1b:
         df:c3:a3:de:0e:c7:14:7b:d8:78:bc:74:26:87:d3:3d:d3:af:
         ef:f7:2d:e3:76:98:0b:c7:5a:35:4d:0d:80:27:73:f0:36:ec:
         35:77:39:20:14:7e:2f:00:bb:fd:a0:49:ad:4f:9d:0d:b7:e5:
         d5:d5:ea:56:1b:5c:39:69:19:27:5f:05:0b:91:ca:10:46:15:
         a1:4f:57:2b:e2:4f:25:4d:65:b0:65:d5:5b:92:e4:e2:17:4c:
         fe:fb:d1:10:c6:27:64:e3:12:72:e1:2d:bb:74:4e:83:86:c4:
         4b:19:c2:8a:7c:3a:79:48:cb:d8:da:42:f0:3a:64:40:ca:d5:
         d5:69:39:ac:71:98:6c:18:f1:80:9a:b0:c9:8b:9f:90:1f:27:
         67:06:92:19:a3:70:eb:df:30:b5:eb:ce:cc:4d:b0:46:e4:e2:
         4a:9d:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----