Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          h+1XfovBR6zc7PUozUIxNeFUZYlZBz68AlAjgOH49Ao=
Subject key identifier:   7F:2F:38:BC:5E:35:08:19:A2:96:9A:E2:F3:12:73:14:8B:95:DE:DD
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01962ECF6A6161183BDD2A7672AA17FBC379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0540
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: 213QnpZk4KWfAJYoZ2tSpWPpWRYCym2O9pLbuagdB/o=)
                          2: QNuVtxOCkP6ptShJW_LgEtc8U3E.roa (hash: GoYMpx4N811JgABiJRx4dBpjrV8ndOKUg755IZS7nEA=)
                          3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
                          4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
                          5: XTWjD9RxeC6l3_NvTHQsET8rn-c.roa (hash: ykYdh3sbXe1rY2ZTlD70M1ZUp3zC5gCXzNGTNEV3S/E=)
                          6: i0G4rbaluY4hsTsMZnJk3iIOMWE.roa (hash: CiK52+AdXFUQok8ZcOo1/t7ZFlrVVCsMaQ9KmIRXLe8=)
                          7: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
                          8: q38p2dL7t029dWFRdSznRG0UCDs.roa (hash: SER6fNtd8df23hWn+6WZezoP9krSPn/CNMhUjqtk/v0=)
                          9: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6a:61:61:18:3b:dd:2a:76:72:aa:17:fb:c3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=7f2f38bc5e350819a2969ae2f31273148b95dedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:78:9e:0e:7d:e4:af:9c:f7:01:12:eb:4f:
                    5a:32:07:7a:b1:c9:78:a4:f9:d9:aa:19:ed:82:91:
                    ea:95:fa:5b:f2:5c:ac:f4:44:72:0e:80:4e:0b:da:
                    20:0c:8b:96:7d:85:cf:72:15:ff:12:28:74:24:f0:
                    19:d6:b8:bc:91:a2:1a:34:75:6f:18:cd:f0:9a:a5:
                    54:24:85:6b:4f:52:3d:a9:e0:9c:aa:d6:1d:7f:0c:
                    5c:a5:3c:f6:b8:f2:41:b2:9c:95:9e:ab:41:4b:d4:
                    2b:ff:be:5d:05:b2:2a:a7:83:bc:6c:7e:ec:be:97:
                    70:1d:9f:0c:fe:08:6c:23:d3:43:6c:4c:2a:5a:33:
                    de:d6:3d:04:3b:34:ea:ab:66:c1:c3:b2:bd:3d:c0:
                    28:9f:cf:f8:91:ac:d9:1b:d0:c3:a0:40:33:0a:48:
                    ef:c4:10:4c:89:c4:28:ab:95:02:5e:06:32:d5:9c:
                    f1:bd:41:70:d6:db:12:51:c5:21:80:bf:61:63:95:
                    07:48:50:71:34:cf:7e:25:29:ad:a3:32:ba:06:3b:
                    8c:aa:8c:8e:67:30:14:40:bc:81:74:4d:2c:ce:d4:
                    25:37:ee:b9:4f:be:d0:08:45:05:e8:29:c1:e9:8d:
                    44:20:ff:c3:04:4b:45:ac:6c:2e:4f:e7:f8:c0:80:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2F:38:BC:5E:35:08:19:A2:96:9A:E2:F3:12:73:14:8B:95:DE:DD
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:71:43:01:66:28:6e:9d:c2:1b:af:ce:e0:0b:af:31:4f:81:
         2a:04:6d:3d:97:20:70:2b:77:35:0f:f3:43:55:61:9d:58:5d:
         7d:60:10:ef:a8:20:4e:9b:de:43:75:5a:e4:30:98:57:83:99:
         10:1b:d7:44:a2:cd:09:be:bc:1d:cf:a2:f4:be:56:5e:9e:8a:
         35:53:a2:1e:f1:17:43:4f:50:a8:1e:8d:10:45:0e:d9:cd:49:
         12:49:7a:3a:03:0b:6f:59:c0:cc:1d:5c:16:33:0e:c7:15:e7:
         50:88:71:0d:d9:53:ae:d6:93:71:ee:8b:99:48:49:20:77:3c:
         58:63:93:35:a2:e5:07:68:ff:80:d8:39:85:15:c1:27:d1:4e:
         c2:b0:54:ce:37:a1:21:8f:c3:33:51:bd:f2:74:42:c3:bd:c1:
         84:7d:df:a4:5d:3c:39:ae:82:8f:30:20:44:f5:23:a6:2d:29:
         5a:bb:bb:13:01:96:a7:4b:63:1d:fd:9e:43:85:26:32:34:14:
         32:12:eb:7e:eb:8d:52:dc:ca:ab:9f:bd:c7:e9:36:86:43:94:
         d3:06:74:d7:d3:1b:77:57:36:c9:74:5e:54:aa:bb:e5:7c:04:
         6b:7f:62:2d:43:4c:bc:e7:3b:f5:0b:70:e3:01:76:22:64:59:
         40:03:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----