Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File:                     1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier:          2c0w1ScHHMJzZlkVBqRQ3eGxXCLYN/OUfbSmr+zVVRI=
Subject key identifier:   2C:FA:68:0F:3E:49:99:AA:61:9E:D6:FE:CB:8B:20:34:50:3D:D0:E1
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer:       /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial:       01962F3DCCDAF7882026047972D04E03EA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: Wy6/x4PmfXlNO0wES3s6VMgqAPPNSYZt+pVat6SFuko=)
                          2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:da:f7:88:20:26:04:79:72:d0:4e:03:ea:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=2cfa680f3e4999aa619ed6fecb8b2034503dd0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:6c:99:fb:bb:6d:1d:a2:88:b8:ab:3d:86:
                    6e:35:ca:00:12:7d:93:09:a9:7f:ca:c2:21:a3:fc:
                    7d:5d:c1:fb:f4:f3:a9:a6:fa:63:07:23:01:37:12:
                    b7:71:25:8d:3a:62:1e:b1:36:7d:52:ef:87:73:60:
                    7c:82:4b:fb:82:37:89:88:10:65:fd:18:7d:90:6d:
                    31:0a:01:c3:90:10:97:b2:bf:f1:e8:d7:46:ba:b7:
                    b7:34:0a:cc:f8:2c:0f:07:df:7c:fa:b3:0e:82:7f:
                    8d:5b:30:a9:67:c4:67:00:28:30:3f:25:86:6e:97:
                    cc:ba:d2:e0:19:f6:d0:4f:78:80:1c:49:aa:de:8d:
                    0a:98:b0:12:7e:a0:cd:b7:ef:bc:84:90:9d:12:b5:
                    f1:6b:1b:c3:fc:e4:1e:a2:61:f6:db:11:6e:bc:28:
                    86:4c:86:fb:03:80:88:9f:c0:3c:48:e6:5d:9d:33:
                    e7:72:79:46:40:b8:14:70:05:eb:63:73:2c:46:12:
                    54:21:b5:8f:f2:b2:08:87:6b:da:8a:e1:12:5b:10:
                    63:38:69:14:e0:05:02:84:29:dd:4b:d6:8e:28:a9:
                    b6:ce:05:a0:2b:ed:7a:ed:8b:e1:90:45:98:9a:b6:
                    67:2b:21:7e:9e:d0:6b:92:5c:f8:40:7a:4b:f5:66:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:68:0F:3E:49:99:AA:61:9E:D6:FE:CB:8B:20:34:50:3D:D0:E1
            X509v3 Authority Key Identifier:
                keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:88:d6:8d:b3:3d:09:20:e7:9d:50:ee:ee:69:57:08:63:e9:
         46:6a:40:e1:00:ca:f0:83:ee:ec:83:40:4b:1c:93:95:67:53:
         3f:2c:80:31:91:d3:d1:ae:bb:12:ca:ad:37:16:59:fe:70:8f:
         ad:e1:15:35:e3:6b:45:f3:ae:31:39:a5:d8:c4:64:f9:65:8c:
         39:07:9d:18:a8:d3:7c:cb:7e:85:13:8f:29:da:96:4b:ab:8e:
         de:f2:62:95:fc:aa:42:4c:e4:9b:af:cd:eb:dd:3f:4d:ed:b0:
         ed:e3:28:47:4c:80:45:1c:c4:57:06:6d:89:b4:b4:d7:ba:3a:
         27:74:6d:b5:29:c7:66:bb:b5:bb:90:fa:42:43:ed:30:6b:cd:
         4c:00:33:06:21:32:72:d2:99:b0:0b:ec:38:82:24:07:9f:94:
         1c:40:5b:6f:16:7d:d0:0d:0a:bd:08:7d:d2:95:ac:76:74:64:
         dd:f2:9f:42:da:94:f6:59:d4:a2:0a:a7:9c:4d:ed:1f:0a:23:
         3f:75:f0:28:e5:0e:cd:53:de:63:4d:4d:61:3a:fa:d1:81:03:
         e5:7e:c1:f1:24:dd:09:6b:0c:3a:d1:18:4f:a2:7d:6e:ea:92:
         7a:ca:55:9c:61:68:06:6b:73:60:01:d8:8c:56:10:69:86:f9:
         00:ee:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----