Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File:                     8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier:          3oyZUnBBRHPIyotsZhnTLBccP44H7xKEp7rLiaUXBLI=
Subject key identifier:   D7:D8:42:30:3C:60:25:90:67:7E:38:1C:F7:66:C5:59:92:34:C0:C4
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer:       /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial:       01962E9861621F2A5341CDC35275D605D3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: j7qoZDyudV9lH2xMCoNgNn2VqueFl6ayhRFgvmBoSy0=)
                          2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:62:1f:2a:53:41:cd:c3:52:75:d6:05:d3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=d7d842303c602590677e381cf766c5599234c0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:9f:c0:e1:71:0a:97:ed:93:eb:24:ef:7e:
                    df:6c:f2:ff:36:b0:8d:36:dc:30:2d:92:f6:ea:49:
                    0f:31:69:5b:8d:39:7b:9c:26:2b:31:42:11:86:7a:
                    c3:71:49:05:04:22:ef:56:0d:9e:8b:c7:44:c5:b8:
                    35:c4:b3:32:01:b4:02:f5:81:b6:b3:30:f2:81:01:
                    ed:40:93:28:7e:8a:6e:2e:a0:80:a0:83:58:7c:58:
                    0f:b9:57:04:bb:3c:34:ac:dc:4c:03:53:58:fc:21:
                    11:dd:a5:57:7d:20:2c:86:5b:69:4e:57:fc:5c:0b:
                    3b:ef:45:0f:bf:b7:24:e0:08:ae:19:4e:bd:91:fa:
                    51:68:78:82:51:4e:6a:be:28:89:30:f5:17:46:7d:
                    8c:1a:51:3a:3f:b9:d7:04:46:96:b9:89:dd:85:5a:
                    de:7b:64:fe:56:da:6e:5f:d6:57:01:4c:f4:06:03:
                    89:45:b9:45:c0:ff:f7:bf:77:89:b8:44:d7:fd:c1:
                    ae:5f:a4:4a:10:7f:47:60:a9:72:9a:65:09:a6:e2:
                    b8:83:71:27:9f:33:9b:ec:12:84:ac:88:02:f9:cd:
                    aa:86:39:6a:fd:41:93:96:d6:98:0b:1d:b5:19:72:
                    61:4d:d4:29:8c:e4:5f:eb:62:90:98:a8:a5:74:35:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:42:30:3C:60:25:90:67:7E:38:1C:F7:66:C5:59:92:34:C0:C4
            X509v3 Authority Key Identifier:
                keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:15:4b:4f:fa:ff:73:88:79:2f:99:86:35:c2:7e:36:a8:
         c9:a7:fe:3a:f8:96:72:08:3a:d8:59:bd:7b:e9:05:83:be:13:
         1b:60:6a:30:d6:03:49:db:87:51:c1:ee:ed:20:3d:e4:ff:49:
         de:57:77:4e:af:9c:1b:94:0b:b8:61:a2:40:77:e2:53:bc:f6:
         7d:f2:d6:52:16:d8:f9:87:37:46:90:0f:de:6d:62:ee:44:8c:
         7d:46:2e:b2:63:ac:18:b9:de:23:7a:13:d5:df:32:53:2a:58:
         fe:f9:29:8a:52:1b:5c:54:e1:60:2d:0a:c2:95:0e:67:80:71:
         41:dd:b9:f9:c1:50:d2:65:6a:1b:a2:c2:50:b3:08:7c:5c:4d:
         ed:32:44:1a:b6:ec:c0:fe:6a:47:68:69:12:de:73:89:6f:e7:
         61:39:0a:85:0c:80:8c:30:75:63:c8:0f:29:4f:be:6b:14:8b:
         c9:e4:0b:d2:47:e2:22:4e:67:9e:57:0b:8b:5a:bd:d5:44:7d:
         b3:a3:a8:74:c6:bf:d2:2b:38:4c:46:8f:db:5c:e5:64:74:7f:
         6b:f1:8f:17:db:30:41:e7:18:54:e5:67:67:0a:cb:b9:59:e8:
         cc:14:0e:05:6b:a4:24:30:d5:04:c0:1d:83:6c:ad:5e:25:3c:
         a4:56:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----