Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          naU/+PzVTD8pEhxUG+zHN8FpPMnz6fPm0zy1ME8pPyw=
Subject key identifier:   FD:0A:4F:DD:CC:1F:05:20:E7:D7:C8:58:9F:B5:FD:4A:48:12:A9:A8
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       01962E9871FA171F47E6125E0C13C5B6FAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          0DE3
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: NzSTs/0ssVSMH17NZWYdipMeEemlwRvfnELy5rk+/sE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:fa:17:1f:47:e6:12:5e:0c:13:c5:b6:fa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=fd0a4fddcc1f0520e7d7c8589fb5fd4a4812a9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:8d:9b:ea:a8:5a:33:e3:56:15:b8:c9:f6:
                    27:87:84:00:7a:57:d8:1c:c5:86:19:02:db:16:69:
                    2e:bd:31:b8:c3:4c:c7:21:6d:5f:09:ff:b8:74:d2:
                    e7:b2:74:c6:ae:68:21:dc:c3:41:3a:b7:d4:6a:ba:
                    9e:0f:86:15:69:c7:7e:7d:f9:cc:ec:71:21:dd:53:
                    fa:0a:8d:cf:b9:5d:87:31:67:da:6d:2a:f0:03:10:
                    b1:43:42:2e:38:6f:60:77:4c:ae:fd:d6:79:69:77:
                    3e:75:7c:15:9b:84:d8:a8:24:e1:fc:38:74:45:eb:
                    15:f6:af:f4:f4:1f:66:4a:ea:6f:82:08:8d:25:7f:
                    ba:fc:78:7c:3d:40:63:c5:a9:c9:c0:27:11:48:7c:
                    7f:e4:65:9e:f2:7f:56:38:84:bf:98:6a:12:dc:24:
                    e6:42:ba:cf:9d:9e:80:a9:a9:d4:2d:1d:c0:7f:06:
                    8e:0f:34:b4:b5:60:49:e4:86:4e:a2:63:9e:ce:5d:
                    25:c3:6a:85:63:07:62:6d:8a:a3:6c:6f:8f:d1:c0:
                    4f:57:1c:10:b2:b8:ba:01:bd:42:e8:9f:21:bc:8a:
                    0a:f0:7a:0f:c4:9b:53:72:51:a3:c3:db:84:03:07:
                    b4:18:c3:0b:ee:27:fd:a5:b9:39:2b:b2:16:91:9d:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:4F:DD:CC:1F:05:20:E7:D7:C8:58:9F:B5:FD:4A:48:12:A9:A8
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:49:0e:e5:d3:de:56:0e:6a:81:56:70:f7:71:e7:1f:a2:31:
         77:88:71:48:e8:d2:5b:e2:ec:d2:dd:f4:0a:9f:8a:75:6f:be:
         85:2b:62:cb:fd:9d:4f:78:d1:5d:22:01:1e:23:36:89:0f:75:
         3a:b2:51:f4:17:11:ba:64:a6:af:05:1b:26:73:40:98:0a:44:
         95:9f:bc:fd:83:32:01:88:2f:52:2a:21:4f:64:ad:0d:e9:f6:
         f5:2d:65:c5:77:b9:3e:02:65:b6:76:46:3c:69:f6:6f:f9:49:
         15:f5:e2:84:64:be:46:fa:7c:15:4e:9f:09:3f:a6:98:4c:3c:
         f6:a3:3d:0f:a1:01:5c:d9:1b:4a:11:b5:18:1a:ea:25:8d:7b:
         a7:82:95:cc:aa:f4:39:b6:de:6a:22:23:00:6d:76:b7:4e:53:
         01:b5:ad:7d:6d:7d:22:95:5a:65:13:6c:e0:e0:6a:30:10:3d:
         a1:9e:4d:0f:37:4d:8a:64:26:7f:06:ae:f7:d1:83:fc:c5:b7:
         28:ee:49:0b:d3:39:11:9f:a4:d7:31:49:f9:ac:fc:9d:7e:2a:
         ec:43:b1:6f:5d:9e:ae:59:91:45:4d:0d:85:0d:8f:a8:24:df:
         03:40:68:28:e3:c5:4a:dc:1e:80:03:db:42:1d:af:93:9b:62:
         dd:f9:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----