Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File:                     fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier:          oEy0ukAQ/VPohQDllkv78oN26v8Hs1e/mtkt7XXb3Aw=
Subject key identifier:   D0:7D:9C:14:0F:C7:EA:97:55:56:3F:A2:94:67:D1:78:B0:7E:42:21
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer:       /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial:       01962F064F7C7F2B3729B468D81A7BC04D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (hash: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=)
                          2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: gs8hFqfk051YXfkIiHVgXWjy0p7XISQAEpkRApxxKT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:7c:7f:2b:37:29:b4:68:d8:1a:7b:c0:4d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=d07d9c140fc7ea9755563fa29467d178b07e4221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bf:99:52:70:df:69:c3:4a:92:b4:d0:31:77:
                    f6:13:03:b6:33:8b:0b:8e:c7:e4:d6:d2:5a:16:0d:
                    80:4f:c8:eb:36:54:fd:5d:c7:d8:5e:49:89:82:c6:
                    f7:6b:f8:8a:48:88:81:e7:1f:67:0f:aa:3b:d0:11:
                    f1:84:e8:3b:bb:57:14:73:5b:df:98:45:1f:d4:2e:
                    44:d2:43:00:ba:89:b0:00:08:86:d5:55:c0:61:20:
                    68:34:30:ab:09:85:b5:89:64:3c:99:d9:ea:b6:f3:
                    90:94:a1:5b:23:f6:a0:47:ac:ec:04:89:34:f6:d1:
                    07:c8:3f:65:10:44:de:d1:1c:cc:5a:a2:0b:70:93:
                    2a:05:58:ee:e0:4f:81:50:80:d0:65:89:d6:8a:5f:
                    43:f3:f8:f1:fb:11:ba:e2:c4:01:2f:e6:09:ba:3e:
                    d6:fc:14:37:d8:62:04:fa:24:be:1e:fd:aa:77:6e:
                    c3:a2:bf:58:72:36:0f:28:6e:fb:3b:06:e7:55:41:
                    ae:f1:06:12:6d:85:12:24:37:95:b1:26:6d:a2:d8:
                    3c:c0:5f:3c:29:79:35:98:cf:eb:7d:6c:55:af:7c:
                    19:8e:15:10:83:d6:c4:0e:85:2b:0d:2c:db:8e:b4:
                    31:1c:6a:38:e2:1f:bb:d0:66:d6:49:23:8c:bc:5e:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:9C:14:0F:C7:EA:97:55:56:3F:A2:94:67:D1:78:B0:7E:42:21
            X509v3 Authority Key Identifier:
                keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:2d:26:c9:83:e9:d4:f4:45:a8:b4:34:65:8a:a4:a1:d1:bd:
         b2:b9:20:f6:7e:b5:61:3d:e4:d2:3f:bf:5d:da:f1:a5:da:8e:
         ef:5c:f0:c1:b7:fd:ca:5e:bc:1a:d1:69:17:27:fa:37:2a:2e:
         f1:cf:e1:ea:ac:36:42:f7:2c:53:82:ed:0a:61:b4:20:9b:19:
         e4:32:fd:8b:84:65:45:8e:7f:39:a9:ed:d0:a2:a7:ba:49:d1:
         e1:72:15:dc:cb:e9:df:01:27:1f:14:62:c7:70:5c:bf:0e:b6:
         12:43:da:e4:4d:5e:b6:3d:e1:98:44:4c:a7:4b:38:10:ae:36:
         36:ff:92:87:0c:47:9c:06:f4:2c:e2:24:5a:ce:ef:f5:a7:59:
         89:d7:08:0c:23:6c:40:f2:7f:48:6f:6a:6c:90:eb:cb:1c:51:
         c2:fa:4a:5d:df:e6:cf:70:b0:57:83:ed:9e:f4:a1:3f:ac:dc:
         f0:14:1a:7c:68:2a:e9:96:5d:60:26:e9:9b:b4:84:f6:92:78:
         43:f2:58:69:58:7d:60:c7:7f:4e:a0:6b:60:1f:66:5f:f9:b3:
         91:b6:99:3c:16:65:1c:02:62:ea:7b:78:82:13:4b:4c:10:72:
         f1:ff:83:0b:a4:80:96:86:ed:bd:38:f1:54:96:29:4c:28:ca:
         97:2a:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----