Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File:                     8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier:          ihKyeHFtCbcjUP3uzZXcZ3rutIaH/dP7GFEubYoii7w=
Subject key identifier:   FD:F8:90:D1:CE:E4:E7:D4:53:A8:B6:04:62:C4:D9:80:50:E7:3C:EC
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer:       /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial:       01962ECFE10B0237F3AC3890FA903C31D6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number:          13FC
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: pGObi1eMcWFEI6+3SiFMBJZpt+5xm8wW8M8Ok5Ld6ts=)
                          2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e1:0b:02:37:f3:ac:38:90:fa:90:3c:31:d6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=fdf890d1cee4e7d453a8b60462c4d98050e73cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:08:52:b3:33:1c:48:23:9f:7f:c1:4b:24:
                    72:35:78:72:42:9e:f0:96:65:60:a4:ba:e3:27:c2:
                    eb:a3:ef:7f:30:8e:54:3f:c7:ae:37:2b:7d:1e:6a:
                    c0:dd:fe:58:7c:18:e6:f6:e9:4f:ff:5e:9b:94:be:
                    2a:36:1e:7b:d9:e7:10:ee:4c:a7:4b:fa:03:fa:91:
                    37:75:13:e4:d2:92:3f:32:ae:2e:8c:c6:33:ef:a2:
                    0f:e9:6d:24:2a:a6:0f:07:af:c5:f2:cd:68:dc:0e:
                    50:12:32:03:cb:18:12:06:44:b3:2e:51:ce:9a:1c:
                    38:ae:ab:79:b5:3f:4a:6b:3c:05:6e:5e:c8:3f:10:
                    7e:0f:b5:67:c7:bd:c6:e6:87:e3:f6:24:dd:a6:b2:
                    e2:2e:ff:5a:e9:cb:1e:81:80:3c:9c:65:8a:ad:7d:
                    90:e6:d3:b3:db:e0:62:32:b0:cf:4b:50:f7:61:d7:
                    09:c7:d0:6f:ef:43:fc:ad:ae:72:6d:c8:6d:a8:6e:
                    be:26:10:a8:de:0a:5b:50:77:46:e6:85:a7:41:39:
                    66:61:ac:8d:d0:d7:45:b8:46:78:4c:9a:a0:31:45:
                    93:85:13:4e:3b:62:63:80:62:c5:ae:46:2b:6f:ed:
                    6c:b6:11:71:1d:05:c9:eb:de:ca:be:f3:dd:7e:36:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F8:90:D1:CE:E4:E7:D4:53:A8:B6:04:62:C4:D9:80:50:E7:3C:EC
            X509v3 Authority Key Identifier:
                keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:61:bf:7f:c8:ad:9b:f4:5d:fa:95:a2:26:75:66:05:45:
         83:48:fe:e9:c7:c2:16:8b:0a:28:90:9a:1a:c9:26:b2:db:8c:
         2d:96:2a:66:de:fd:0c:92:20:00:05:be:2d:b0:d3:72:10:71:
         60:8a:f3:c1:b0:14:f1:7e:5d:69:81:60:6d:e4:88:78:1a:a7:
         6e:2c:16:c8:4d:c1:13:0e:a4:5b:99:22:a7:80:19:14:1f:e3:
         ff:95:c0:df:2e:4a:08:61:94:16:56:75:79:9b:26:f7:9d:a2:
         f2:52:bc:cb:5c:e8:1c:f1:49:2e:ab:7a:7c:18:18:35:1b:78:
         2b:a0:12:19:76:6a:33:06:4c:6c:ee:dd:99:37:75:cf:4f:45:
         68:b0:80:da:f6:5e:68:34:3a:17:c3:d1:61:64:f0:e7:80:17:
         7b:c7:e2:c2:28:51:94:e7:bd:17:e5:0e:71:96:b8:48:d9:3d:
         57:01:65:d0:2b:14:55:51:7a:db:ae:20:bb:20:a6:18:f0:44:
         61:69:9f:2e:c8:ac:2d:f9:4c:e9:73:d8:4c:cd:47:bf:55:f5:
         6a:76:ab:da:e3:d4:76:32:6f:d0:de:ef:67:8e:d9:bd:09:50:
         27:47:40:f3:00:bb:b7:9f:f8:81:a2:18:55:31:89:ad:ba:c5:
         30:fc:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----