Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File:                     _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier:          pZa7eqb0BtEZ6WzbplEeIeCg+ov3t5rV6zB5xdd692U=
Subject key identifier:   26:CE:93:8B:89:13:4E:4B:D4:8D:35:12:A3:23:07:81:1B:D9:AA:E3
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer:       /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial:       01962ECFACEA4312394541FAA70ADEEB3B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
                          2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: UFIjgW+CgR7YrV9ct+fHMGkfDgRhLEnvlhRCGjCSVaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ac:ea:43:12:39:45:41:fa:a7:0a:de:eb:3b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=26ce938b89134e4bd48d3512a32307811bd9aae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:6e:67:07:4b:52:ac:a1:09:ac:32:ac:ae:
                    9f:18:57:bb:1f:09:14:6c:c2:8e:c7:b7:05:5c:82:
                    d9:71:0e:f9:64:b3:58:65:49:7d:90:13:c3:cb:78:
                    ef:9f:20:c1:51:7d:61:4a:bb:32:d4:1f:4a:23:b7:
                    4a:3c:8e:46:4a:30:2a:1f:94:db:13:98:ad:e0:06:
                    61:c1:69:b5:17:e1:ab:38:17:91:08:23:fa:b1:46:
                    60:f3:ed:6b:38:dd:77:70:e6:63:47:92:c9:31:09:
                    d8:b6:0d:8b:87:88:4d:3f:92:f7:5b:ec:35:c2:f4:
                    9a:a4:c8:f3:c8:87:73:1a:14:51:e7:65:7b:40:5b:
                    93:86:a8:e1:49:e9:48:b0:bf:f8:7e:41:dc:ca:d4:
                    e8:88:ae:2f:cb:58:6d:ab:eb:dd:03:1e:bc:eb:10:
                    57:c9:0f:6f:ee:3a:10:c3:5e:40:8d:75:cd:c9:f9:
                    32:dd:6a:dd:6d:d1:b0:69:6e:cb:02:3e:69:15:8a:
                    8e:97:08:23:e6:bb:96:b4:aa:9f:96:10:89:3b:1d:
                    13:3b:cd:ee:9d:c5:ca:99:71:a2:d9:1f:e8:03:be:
                    38:0c:41:29:72:92:96:c4:7d:70:55:79:a6:ee:0d:
                    bc:5a:32:75:0f:ee:b2:3e:c8:71:60:31:d5:51:0e:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CE:93:8B:89:13:4E:4B:D4:8D:35:12:A3:23:07:81:1B:D9:AA:E3
            X509v3 Authority Key Identifier:
                keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8e:91:17:1c:c1:f4:0a:6f:ee:ec:4b:8d:42:7f:7a:13:40:
         46:81:c5:cf:08:1e:00:36:1a:00:e3:53:7c:f1:a0:5d:82:f4:
         64:11:86:11:06:66:f1:a5:2e:4b:79:37:9f:7a:fa:2c:b8:c3:
         f6:28:ad:57:d2:59:c4:9d:57:9c:75:fc:75:25:5f:b0:90:18:
         ea:e4:a3:3d:f4:bf:a3:ba:4a:28:4d:87:87:ff:95:88:af:cc:
         4c:ee:24:f9:05:d0:b1:5d:b8:3b:99:d0:be:03:4b:f4:15:b3:
         cb:14:6b:ac:08:67:99:06:62:48:c6:33:6b:e8:4a:82:1e:2a:
         ac:e9:3e:5e:77:bd:67:85:06:25:7e:6e:72:a8:11:18:10:f5:
         8e:cb:06:f7:de:09:3b:74:3a:da:d6:9a:00:5c:dd:83:87:34:
         04:cf:bc:ac:b3:6a:ee:95:c9:4f:51:08:8c:29:ef:64:26:4d:
         85:2b:81:01:52:1e:7a:cc:f6:e3:9d:9f:19:8c:c4:85:18:9d:
         e8:52:ec:b7:cf:09:27:13:d5:58:81:42:71:2e:38:a8:38:cf:
         80:a9:b9:60:36:0f:d5:7f:0b:43:73:4e:2b:cc:38:23:27:20:
         b4:b5:8c:6d:1d:d1:a5:e8:06:d7:f0:6c:53:df:1f:23:54:10:
         26:3e:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----