Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
File:                     FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json)
Hash identifier:          DyHwL1lg1JLDMwljP0GOAWdD0q7xmhLTwR9ihRCrx44=
Subject key identifier:   81:B5:ED:42:40:BB:CB:E0:03:D9:4B:5E:CD:33:EC:CA:57:BE:70:B4
Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
Certificate issuer:       /CN=156fa931c85eb798c682dc32e42909d71c923b23
Certificate serial:       01962FAB3B27F019CAD72DDE7322F7C8B028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
Manifest number:          03D4
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: 6Ja05/NdSpOAU2kiCz74ToSxqJz1ZMshXQcyRUp6R7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:27:f0:19:ca:d7:2d:de:73:22:f7:c8:b0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=81b5ed4240bbcbe003d94b5ecd33ecca57be70b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:d6:c2:f9:ae:3d:79:2d:69:73:0f:ea:fa:
                    4c:84:0c:17:c8:d3:3a:ba:33:6b:03:03:e2:bb:e3:
                    6c:da:b9:67:dd:d3:09:43:86:6d:3b:6d:4c:0f:0c:
                    93:99:c5:0f:bd:9e:4a:99:bf:8a:d9:9b:14:4a:be:
                    70:d9:f4:87:1e:1b:cb:83:44:34:d2:07:03:e9:94:
                    34:8b:85:92:f3:c0:11:0b:9e:59:c4:75:71:bf:41:
                    fa:09:ce:7c:a2:91:9b:c6:fb:1b:ca:b4:21:64:5d:
                    09:2f:c1:13:28:9b:06:8d:6f:9e:35:74:80:d9:b1:
                    09:30:2b:34:27:c6:f1:f6:62:61:ed:e0:13:61:14:
                    5a:f3:ed:54:db:2e:49:35:3c:7a:6f:18:f3:81:9f:
                    48:87:66:5f:16:8f:eb:c1:b7:76:7e:a7:19:1a:1b:
                    58:49:ac:b3:1a:e5:58:13:f6:91:f7:ab:78:8f:af:
                    de:f4:4b:af:72:c1:dd:f0:a9:23:22:86:1e:14:15:
                    4c:84:51:b1:b2:dd:59:cc:a2:01:c0:76:fb:ea:eb:
                    53:3a:58:7b:64:40:55:f5:b9:da:a0:ce:5f:70:7a:
                    3e:50:36:87:1f:f0:53:a1:dd:94:67:5d:a0:38:e8:
                    73:90:22:25:c4:ad:d9:d3:65:d7:b8:72:71:f9:51:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:ED:42:40:BB:CB:E0:03:D9:4B:5E:CD:33:EC:CA:57:BE:70:B4
            X509v3 Authority Key Identifier:
                keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:30:7f:7d:d2:f9:e0:01:68:22:d5:3a:36:bf:96:77:10:
         d8:81:63:a8:f6:cc:9f:87:e4:88:8c:a5:4d:60:33:ad:c4:ad:
         4e:84:df:f7:b1:53:63:8c:bc:fc:b8:df:fe:5f:80:92:29:24:
         ff:70:ad:1e:72:93:d6:54:2c:78:41:a8:7f:04:ab:3c:4e:49:
         ff:25:72:27:47:1f:da:d7:18:f9:fa:d3:95:a5:c0:56:df:5e:
         7d:43:a2:0c:31:2c:d2:d1:21:4a:7f:5d:86:8d:f4:e6:b7:73:
         21:76:24:ed:9e:78:ac:3e:15:c4:97:d7:e1:15:12:0d:de:bb:
         2f:af:d8:57:c1:0f:23:5a:52:34:12:21:0b:50:41:32:c9:cf:
         b9:0c:83:a2:06:ad:ec:3a:82:fd:4d:47:0e:58:f9:17:9a:12:
         9e:3f:e9:3d:b2:4e:6b:9c:94:3c:2a:ec:1c:4e:e5:36:df:a5:
         22:b1:f6:14:ac:b2:59:5d:a0:8f:a7:e8:72:8f:15:a3:f4:d1:
         bd:67:df:62:03:5e:d4:7d:d5:f6:00:f9:35:ff:8e:ef:0b:2f:
         b4:6b:1a:a9:eb:f6:69:3b:20:66:e1:d2:87:20:d5:1d:c1:f2:
         ae:9e:c1:93:fd:af:08:c6:8f:e3:c4:bf:d7:6b:b9:8a:94:d7:
         8c:42:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----