Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File:                     fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier:          TPNE4W/C77RyHJrWdTbRw4eoYmZK5EWnkPgQrWNZmAc=
Subject key identifier:   C8:DD:A9:01:D0:0C:57:86:82:27:95:9C:67:E2:30:8B:59:10:A0:0A
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer:       /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial:       01962F748AC3E78A05A5F0EAA5EB0E811BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number:          13EC
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: EIKOgQFi5mojMPucev_-8ewm_-E.roa (hash: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=)
                          2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: F0VJB6E6mBSBMx/xFquKqe6cW+eHUyH7BWV/MucaY88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8a:c3:e7:8a:05:a5:f0:ea:a5:eb:0e:81:1b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=c8dda901d00c57868227959c67e2308b5910a00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:9b:1f:2d:95:5d:91:33:02:35:dd:7b:11:
                    58:6d:b4:74:80:52:ec:7d:06:41:d7:a0:49:78:71:
                    0c:6d:c2:93:4f:d8:7a:58:af:2d:38:63:d5:ff:08:
                    a8:33:16:c3:03:62:1c:28:eb:1a:62:5a:a8:85:eb:
                    18:27:19:ee:dc:bf:ee:dd:14:f8:94:f2:4b:b5:fc:
                    1e:82:23:cb:dd:a5:63:8d:ab:0a:09:91:7e:f5:33:
                    88:60:54:c7:fb:e8:c6:9a:dd:12:94:ed:1f:fe:1b:
                    35:3d:54:12:74:d5:65:bc:0f:6a:55:61:10:71:60:
                    43:be:a3:f1:96:49:fa:80:70:7d:e7:74:98:fd:6e:
                    7c:40:77:42:c1:c9:18:05:d2:b9:1b:1d:9f:28:92:
                    0b:18:ec:3a:30:d9:d1:03:0a:c0:7e:d7:d3:08:82:
                    4a:18:65:b5:6c:f7:1e:5b:98:9a:7c:46:ab:0a:c0:
                    0f:17:e1:60:fc:37:4a:47:11:0b:64:66:97:18:a8:
                    08:e0:d3:69:8b:ec:0f:a0:5c:77:69:33:68:db:70:
                    8c:fe:b2:58:c4:c5:98:72:81:8c:f3:ac:1c:ae:90:
                    63:3d:bd:db:0f:44:45:f4:44:21:c3:70:61:7d:7e:
                    98:02:f3:40:1b:42:10:39:0c:bd:72:f7:6f:c8:50:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:A9:01:D0:0C:57:86:82:27:95:9C:67:E2:30:8B:59:10:A0:0A
            X509v3 Authority Key Identifier:
                keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:09:a4:20:38:7a:b6:42:d7:75:0a:53:1c:ae:70:6a:04:
         7c:8f:63:a4:fe:e7:13:15:0a:3d:37:8c:db:16:bd:15:f4:93:
         af:b9:86:22:2c:f9:a5:08:8b:48:f7:b9:54:8e:1c:76:a6:42:
         9e:4d:c3:f4:b1:a9:40:9e:02:17:e5:a0:73:d7:ee:0e:b1:60:
         8b:67:de:59:40:d7:d8:e6:ec:df:00:2f:33:61:27:c7:1c:c5:
         71:db:90:bf:93:93:eb:92:05:c0:3f:4b:c5:df:41:01:99:af:
         f9:9e:cc:1c:03:6b:56:07:d5:5e:2a:a1:18:e9:7a:a8:11:4e:
         02:b8:25:0a:f5:72:79:59:1e:c6:85:3b:5a:f3:a5:81:e4:f9:
         ae:bc:75:0a:18:31:33:c3:c0:1b:3e:c4:c9:63:4a:25:96:d4:
         a9:92:ec:c5:8e:58:ca:1a:c3:c6:86:af:80:a5:f8:31:ba:d6:
         86:41:ee:24:af:51:2f:8b:b2:47:da:89:af:bc:89:f8:27:f6:
         02:0a:c0:09:c8:cf:a9:9a:34:a3:95:67:f7:e2:01:34:4c:9a:
         55:77:6f:97:47:02:7c:04:58:a0:0d:c3:a0:bc:da:36:06:70:
         db:2e:ca:84:39:df:d5:ff:f6:01:82:0c:9e:6c:87:b5:ad:bb:
         e4:f6:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----