Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File:                     fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier:          jsVs3HXML6jo6TUWieylxUXz4TCHP/8eervxTHH8GYg=
Subject key identifier:   6D:FF:49:C4:8C:10:E9:E6:AF:76:66:12:4B:63:BC:F9:49:85:3A:59
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer:       /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial:       01962FAB31A6786E5CAB0CA8BD5F3ACAAC74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number:          0B0F
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=)
                          2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: 32d7YEjDs7PRHhX8zz7Fb6tt7CaTvfPcqrZhpJFlKUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:31:a6:78:6e:5c:ab:0c:a8:bd:5f:3a:ca:ac:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=6dff49c48c10e9e6af7666124b63bcf949853a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:34:6c:0e:86:26:82:d2:1a:ef:f3:db:47:5f:
                    3f:9a:68:c3:16:c9:01:18:79:1b:94:f2:23:23:3c:
                    e8:fb:39:a7:c7:43:41:f0:1a:43:e3:f3:6f:49:64:
                    cb:ef:40:2c:63:54:ff:6f:e4:a1:f9:da:ca:a2:48:
                    e1:e1:17:41:97:78:c5:8c:a9:1f:f5:9a:ee:f6:99:
                    49:db:ce:ba:d8:53:d6:e5:d3:02:b5:c9:cb:50:29:
                    84:75:94:cb:c8:3f:48:aa:23:6a:77:14:a9:a0:d0:
                    6e:17:02:d2:59:b1:02:c9:c8:bd:df:a8:c4:e7:5f:
                    3c:94:82:d7:a2:03:23:15:17:b2:5e:44:b0:6c:8a:
                    dc:92:50:72:c5:31:12:87:27:2c:6e:a5:7a:c5:c6:
                    ce:d7:b0:13:7e:37:42:54:2d:47:e1:49:b3:f9:37:
                    3e:12:15:90:7e:b4:fc:ff:c2:bb:fa:47:28:5e:c2:
                    63:f7:57:24:9a:86:ca:ed:1c:72:94:a8:0c:44:69:
                    ea:2c:73:9d:b9:c7:df:17:c7:da:e8:56:d9:7f:90:
                    06:1a:24:69:34:47:4c:6f:1a:0e:da:f2:60:62:6a:
                    c8:6f:9b:64:19:63:76:58:30:7a:b4:d9:6d:37:49:
                    ba:a2:36:4a:90:b1:68:e9:c0:8c:ba:09:b2:83:e3:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:49:C4:8C:10:E9:E6:AF:76:66:12:4B:63:BC:F9:49:85:3A:59
            X509v3 Authority Key Identifier:
                keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:de:e9:e4:e9:5d:c0:5e:c2:5d:5b:07:d3:97:1a:b0:6b:
         cd:c1:d8:3b:15:db:14:2c:f6:98:27:dc:d6:d3:e4:c5:ee:85:
         f4:7b:99:8f:1c:b4:96:05:23:24:26:ea:2c:26:63:e4:04:46:
         cb:33:2d:21:d1:67:36:9b:70:44:b6:23:03:8c:69:e3:43:8a:
         13:86:e1:ee:3c:e5:0f:62:6a:ea:e8:b2:f9:d5:6c:2b:cc:92:
         a3:f1:77:97:0e:60:be:9a:5a:4a:d8:e7:5a:98:e8:a6:28:88:
         6b:73:e6:b6:03:58:7f:e1:a6:3f:68:57:38:2d:91:d7:ef:6f:
         87:90:51:bb:d3:ba:1a:fa:3d:5f:46:35:06:6e:df:8a:1f:c5:
         a4:72:60:59:c6:60:b1:5d:db:98:24:7d:f7:df:c3:74:61:f4:
         c6:0d:73:e5:c3:11:e0:b6:c0:a4:ef:41:64:74:47:df:23:f9:
         65:04:d5:64:b9:c2:ff:76:35:0d:99:7e:c2:19:0e:1c:4e:0a:
         ff:ad:2b:db:a6:f9:5c:f2:75:e0:fe:b5:9a:10:f0:4b:d3:be:
         b7:8e:76:50:a9:87:64:99:93:f3:08:26:cd:2d:15:1e:48:1d:
         6e:62:d8:59:38:a5:3b:f0:5c:e6:6c:b3:79:1c:ca:b9:25:1a:
         77:9e:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----