Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          zWZzzk5f5GIaTokYIDAXeDJErjKRaQqYg+ReBtJRddc=
Subject key identifier:   72:32:6B:42:5F:EC:8D:F2:55:5E:18:2C:77:C0:22:1F:44:6D:67:97
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       01962E9957179A11366DEEF6189F6A637AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: PLgAC+hBr6UskoBOgKZMEnPFYgZ5FWyaI9HAJ5cH8O0=)
                          7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:17:9a:11:36:6d:ee:f6:18:9f:6a:63:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=72326b425fec8df2555e182c77c0221f446d6797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:f3:e1:82:37:98:07:5c:c5:31:e1:9e:a6:
                    c8:ab:2d:b9:6b:8c:4f:d9:3a:8b:61:00:c5:9e:fe:
                    7d:db:29:9e:fb:40:44:c4:c0:f1:41:49:1f:60:73:
                    f5:3a:f1:64:e2:31:9d:de:51:7a:6a:a0:67:e4:22:
                    b5:85:8e:ec:18:a4:55:22:46:32:0a:c8:84:88:46:
                    7d:74:16:01:ae:ab:04:87:eb:ca:c6:a0:ed:b9:60:
                    68:ab:10:1e:0e:6a:ad:17:86:4e:60:19:cd:0c:c9:
                    25:ce:d0:3d:80:9d:af:fc:73:d6:49:3c:18:01:fe:
                    bf:eb:83:96:d1:c7:34:71:75:96:96:3d:e7:e7:8c:
                    10:ec:e6:4e:fd:0d:c5:29:56:d3:cd:f5:96:c2:fc:
                    9b:56:e5:58:08:8b:ca:a6:f8:f3:3a:40:44:fd:9a:
                    58:ac:0b:f1:0f:a6:6d:b3:c7:8c:f1:0f:7e:5f:a2:
                    46:70:0b:41:d0:58:9e:04:bf:d3:3f:9f:21:b1:ac:
                    13:5b:f8:1f:97:ca:90:f9:e3:df:8d:31:b3:d1:f7:
                    c3:af:f8:1c:f4:80:27:3a:98:93:57:eb:a4:9a:89:
                    b2:9f:17:5c:4d:af:81:69:b0:58:21:4c:be:9a:41:
                    55:9b:92:40:5c:df:96:d6:67:2a:b8:37:75:20:16:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:6B:42:5F:EC:8D:F2:55:5E:18:2C:77:C0:22:1F:44:6D:67:97
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:87:3c:30:71:28:a4:e0:76:5b:70:61:eb:c4:f6:f5:b6:4b:
         d3:93:b3:5e:18:f4:84:81:38:79:7b:42:ed:a7:4a:ab:3a:66:
         de:56:e3:da:cc:21:05:32:13:66:d5:3f:0c:2f:06:61:1f:b4:
         92:67:0a:4d:4d:2a:89:44:fb:92:3a:45:9e:f9:b9:fe:52:e8:
         2e:42:55:b9:a9:dd:d7:16:d2:74:6f:2c:12:2d:6f:e5:dd:15:
         f3:80:b9:d3:8d:2e:95:b8:fe:3d:99:02:81:1f:2a:82:9d:69:
         00:11:88:f7:a4:f1:05:0c:bb:fc:51:ef:9a:4f:01:03:ea:b6:
         03:ae:1a:81:da:67:8d:e9:29:1b:86:7d:3a:34:21:f5:1e:7c:
         34:76:b0:80:71:20:90:ae:3a:56:99:05:cc:ed:6a:51:83:15:
         7d:4a:72:fb:6e:4f:83:40:f2:58:a0:c8:ba:28:d8:bf:33:70:
         1b:fc:6d:4b:a6:58:4d:11:87:44:a2:11:51:d2:3b:c9:0f:5c:
         ba:92:67:66:32:7e:3a:75:3c:12:dd:23:e5:ab:a2:6a:4f:68:
         5b:34:5c:0b:9b:70:86:e8:48:e7:73:a8:25:02:01:b8:62:c6:
         f9:f5:f3:30:0c:02:bf:a3:5a:03:53:b8:53:29:9d:20:52:04:
         eb:19:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----