Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File:                     FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier:          uWBFI36uYODNDu263uFwZUB/kK7+RRnw1kNh2BbOwNI=
Subject key identifier:   07:B8:36:A9:01:6C:C9:F6:F7:1A:4F:53:FD:99:9E:48:BB:74:45:11
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer:       /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial:       01962E2B322C9023288EEE90E360311259B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number:          0967
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: 0hZ9AGdimg5NkjD6G2T/yqtorX4N1+3ISeXJlviDK+M=)
                          2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:32:2c:90:23:28:8e:ee:90:e3:60:31:12:59:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=07b836a9016cc9f6f71a4f53fd999e48bb744511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:7b:5d:ee:9a:86:53:70:0e:c3:84:3c:c5:
                    74:15:86:9f:e0:46:f2:b1:87:d3:52:26:70:65:c7:
                    42:d5:9c:fe:28:c3:6b:e7:5c:0f:45:2e:fa:0d:d2:
                    36:8f:91:99:7c:12:be:f0:d7:d6:f4:68:5a:1e:84:
                    68:c8:6a:28:1b:b5:35:92:f9:8c:a7:ba:06:ba:db:
                    99:9e:49:d7:e7:ec:d1:d8:6d:59:1f:2f:a6:d8:72:
                    b6:d6:18:99:7f:34:ed:4b:bb:68:08:c6:1a:58:ef:
                    d2:18:77:48:87:cd:58:2b:b8:20:0d:6e:09:6b:c5:
                    4e:85:a9:e5:25:76:13:68:e9:5e:4e:9f:a7:6d:59:
                    5a:36:39:5f:a4:0e:8f:f9:b3:7d:d0:0e:79:f6:57:
                    df:b7:a3:f2:eb:60:72:6c:6f:ec:b9:cb:08:3d:e8:
                    4b:98:73:d9:94:6a:75:fc:d0:45:16:fb:30:ec:ac:
                    95:58:78:86:cb:25:d1:51:26:2a:0d:ef:90:ae:ec:
                    0b:be:78:cb:ee:75:2c:e6:b3:a6:5e:63:52:62:a6:
                    56:1e:32:f8:d1:52:47:b2:d4:46:1a:be:b4:3e:18:
                    cb:4d:dd:f6:2a:9f:62:63:82:15:0f:f8:c4:a7:21:
                    39:05:63:b7:55:42:6d:98:ab:23:76:7d:b8:a1:a3:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B8:36:A9:01:6C:C9:F6:F7:1A:4F:53:FD:99:9E:48:BB:74:45:11
            X509v3 Authority Key Identifier:
                keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:87:eb:02:22:57:5c:55:91:b6:ad:3d:57:1d:f1:5a:f6:
         10:cf:9e:1f:bc:87:9f:2c:c5:f9:35:47:15:d5:93:91:61:73:
         46:91:11:77:37:25:9a:05:73:57:5d:4d:44:90:3e:c9:7e:19:
         e8:60:17:b4:ea:da:f9:62:ed:87:8e:c8:be:4f:55:64:13:ce:
         77:cf:8e:be:9c:e4:85:e3:96:5b:7f:8f:ad:81:f7:4f:14:f8:
         4c:b3:54:d7:7f:56:a7:78:34:e7:42:8b:fd:a5:fc:13:e1:65:
         c0:71:b5:06:7b:10:95:39:22:8e:e7:af:05:d5:8c:17:79:13:
         25:78:1d:7b:e2:94:a9:60:f4:14:93:5b:2f:2e:0f:51:a6:5a:
         a2:a5:90:39:3f:3d:00:95:db:e9:52:c6:8f:16:98:92:24:9b:
         21:a9:0d:0c:58:f1:51:c2:36:cb:ba:9c:76:06:b6:88:b6:57:
         e3:db:7f:94:26:ea:6f:e9:7a:27:49:27:4f:14:3b:14:18:1e:
         62:cb:03:4c:db:d9:bb:ea:25:2f:26:6b:55:ca:54:1a:76:1d:
         a0:8f:e4:7a:94:48:98:41:10:96:12:41:62:84:3a:d2:46:e8:
         d7:23:d8:09:c4:69:2b:6d:07:79:4d:b9:7c:70:31:db:1e:a5:
         ec:09:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----