Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File:                     1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier:          gyl2OqO4NnKuDAYBVN2Psl0LjbSysn8D+6qi6d3sXkM=
Subject key identifier:   C2:D3:99:EE:A5:AC:91:13:BE:D5:DA:6D:C0:E1:7C:3F:DB:2B:B1:E3
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer:       /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial:       01962E98AE7203CD93ECFD09BDE6C2FDAF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number:          0F6F
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: YkvWMnGUcwLixcA3oKqNdxDljQMzfZYdVHmdG3ekcN4=)
                          2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:72:03:cd:93:ec:fd:09:bd:e6:c2:fd:af:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=c2d399eea5ac9113bed5da6dc0e17c3fdb2bb1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:71:ba:f7:71:a8:e3:d8:c0:b2:39:1b:67:
                    96:6b:62:e4:50:8e:30:68:3d:84:87:f9:ba:28:5c:
                    59:fd:a7:d0:cc:49:e7:e2:00:9c:40:14:14:72:7c:
                    9e:50:de:a9:ba:0e:8b:1a:dc:81:ed:f2:d9:be:de:
                    b1:41:bb:1c:6e:91:20:11:f9:c0:79:ee:cb:84:07:
                    2f:68:4e:f6:88:be:ec:32:d4:e2:b8:e6:83:d1:f7:
                    b5:28:4a:c0:c6:4b:4c:f7:79:3a:57:c4:35:17:31:
                    b7:91:ce:b0:66:b7:24:72:29:fd:2e:5f:bc:5d:b9:
                    91:11:47:34:04:16:0b:85:0d:39:e7:e3:73:07:5f:
                    e7:96:c5:26:0c:17:2a:90:e5:a4:be:a2:91:ca:f4:
                    45:48:88:98:8a:1e:16:b9:63:b9:5f:51:6b:02:76:
                    a7:8c:1b:ac:da:bb:29:a3:cc:8d:15:5d:38:50:c4:
                    38:5e:a8:d5:fe:78:ed:04:09:dc:bc:48:58:aa:22:
                    41:3d:8e:cd:c5:a3:c8:39:50:49:d8:86:79:a5:c2:
                    8a:f4:47:7f:38:8a:8f:fd:f1:8e:24:da:67:15:3a:
                    ae:3b:6b:69:94:61:68:e8:a1:d2:8a:0a:11:d1:72:
                    c9:df:08:fd:bf:ef:7d:73:0f:60:2c:b6:e3:88:cc:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:99:EE:A5:AC:91:13:BE:D5:DA:6D:C0:E1:7C:3F:DB:2B:B1:E3
            X509v3 Authority Key Identifier:
                keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a5:c3:8b:45:e1:69:cf:fc:80:29:a0:7f:25:7b:59:3f:30:
         60:83:eb:29:d2:74:82:23:77:79:ae:f1:9b:5a:2a:6b:cc:ab:
         6b:d8:6d:af:ea:f0:58:30:79:3a:6c:e3:41:db:95:a7:9b:47:
         00:73:14:07:7b:11:e7:9d:94:d5:a4:b5:2d:0f:a2:04:c5:72:
         18:aa:5d:6f:4b:a5:25:01:dd:28:8e:a9:30:3d:d8:61:9d:d5:
         74:c5:03:e6:7d:bd:1d:99:ee:42:8b:18:47:61:60:e8:91:31:
         90:dc:ec:b0:8d:3d:d7:7f:af:19:40:e3:f2:26:b2:ab:55:21:
         22:a1:3f:56:6c:e0:ff:38:62:87:17:90:99:1a:09:5a:ab:f4:
         5f:59:f5:ec:02:6b:97:0e:64:d2:fd:d2:8a:d7:89:38:42:3d:
         2d:5a:f0:2e:84:6a:7c:08:ea:40:b1:78:dc:2f:79:07:91:8a:
         33:4a:a1:78:bc:6c:f2:a0:c7:c6:80:d3:58:62:84:be:e2:1e:
         95:64:8b:50:ad:c6:cb:21:26:94:90:fa:85:d4:2d:0c:c9:0f:
         ec:46:43:c1:2b:75:b3:dd:09:f3:5a:3c:c8:2f:d4:e8:8b:58:
         97:55:16:4d:6f:ea:4f:46:19:86:5c:ff:48:d9:08:bd:e0:63:
         ce:5c:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----