Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          uqzHnPd82xh91QPT5ocZwyQBkYY5AMMJfO2q/vZ6UGQ=
Subject key identifier:   A7:CD:10:73:75:2F:39:5E:0E:5F:1A:30:75:40:6D:8C:B0:E3:87:F1
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       01962ECFE56191C80321D625B9FEC39C28FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          042A
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
                          2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: sk3wDZAWUcxRYiMWl/JVCzRVUdpQfWE7ZngJIGWeikA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e5:61:91:c8:03:21:d6:25:b9:fe:c3:9c:28:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=a7cd1073752f395e0e5f1a3075406d8cb0e387f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:bb:6b:20:e0:22:ca:2d:d1:02:d0:f2:2d:
                    35:51:00:17:93:a7:bd:bd:b8:67:43:c8:5a:d8:0a:
                    e8:56:3a:bc:c8:ca:62:08:a3:7b:02:b1:57:c2:66:
                    3f:03:8f:85:66:c1:ad:3c:29:bc:8b:e7:b3:38:19:
                    9f:f4:54:91:a8:56:dd:cb:8d:c7:ec:e8:ee:32:c1:
                    1e:07:07:85:2e:d5:9b:8e:31:28:a8:33:20:c0:a2:
                    70:12:b2:42:a5:95:52:8b:30:04:15:4e:3e:ad:85:
                    98:11:f2:7d:91:25:98:38:bc:ea:ee:4e:cf:e3:66:
                    40:63:02:91:47:fd:e2:b4:5d:95:cf:0c:e6:b9:c8:
                    1a:ed:44:c7:48:c1:c5:d0:c2:a5:7d:73:9a:03:03:
                    6a:ca:fc:2b:a4:45:5d:99:a5:2b:96:14:6c:3d:ee:
                    e1:85:62:44:25:df:02:83:8b:ba:a6:be:cb:4a:73:
                    12:7b:d5:ec:1a:07:bf:03:f4:12:b8:d4:49:95:c1:
                    55:9f:ff:7e:f4:f1:19:aa:c2:3e:be:a9:7a:4b:8d:
                    03:4f:b3:35:3d:dc:98:19:d9:f5:7c:b1:da:5d:d8:
                    3b:41:6d:68:6f:14:a0:d3:d3:d0:11:6a:01:9a:80:
                    d0:6d:2b:63:d1:f6:43:e7:dc:ad:09:2d:eb:47:22:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:10:73:75:2F:39:5E:0E:5F:1A:30:75:40:6D:8C:B0:E3:87:F1
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:ec:c7:a6:b5:c6:a7:2f:9a:a0:21:e4:68:2b:1d:11:52:
         e7:e9:c3:d8:a1:5c:8c:8a:03:7e:ae:27:b2:21:9b:f6:dc:d3:
         11:6c:4f:df:4f:ac:3d:da:48:3f:ed:33:5e:b4:18:75:06:04:
         da:5b:7b:d6:ed:f0:23:f8:d7:90:84:9e:36:c0:e0:af:f0:f8:
         c1:3e:f1:ed:0d:a0:18:18:e6:b6:4d:6a:a5:80:df:bf:43:ee:
         5a:fa:14:ce:fd:01:38:2c:f3:18:d5:07:ac:cd:da:df:d3:b7:
         b3:ad:61:2a:27:03:7c:74:7b:14:97:33:94:0a:3f:3b:24:50:
         c7:15:ab:67:02:aa:42:62:75:c3:5d:80:c7:77:7f:bd:bd:4f:
         8b:1e:99:d8:7e:e5:88:49:c2:06:ef:d3:e3:7a:e8:64:8b:48:
         73:76:22:66:02:fb:22:43:a9:d9:7a:83:6a:27:44:56:54:9c:
         57:37:08:db:43:b3:e6:84:c5:c3:67:b4:8e:5a:c4:f3:93:27:
         0a:11:ca:5e:f6:f7:f4:ab:47:17:27:83:a4:24:9d:0a:5d:4f:
         6d:29:f6:b4:30:9d:e9:2c:4a:0f:47:83:f6:de:8e:3a:ac:bb:
         92:cb:ee:e6:d7:f7:37:91:5e:2c:f7:ba:1b:10:fb:0c:4e:c6:
         22:26:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----