Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          bzKXmRCRi82RNhjRz8p9vt8WMmByckuGtLkuS9YaI+g=
Subject key identifier:   95:20:73:00:E5:68:DD:CD:77:CD:98:60:6A:23:6D:93:82:8D:B8:DC
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       01962F3DB982B4750C6D672808336F77C779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0ADF
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
                          2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
                          3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
                          4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
                          5: LOq11mgZFBK-hn7LapkShT7_1UU.roa (hash: 5l/RFDsIvL3DcLZxVz11YBnw24k04mQy9SpCW1HGWwA=)
                          6: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: ducEl8h306vU1q08jHTF+5Q3yb48eWzXtV9JZ0qCsXE=)
                          7: jxRp3LItg7j8erDJ8R0T2aCXCr8.roa (hash: QeV/DuJmi0XOn6jKXthG6G1yFldJpvp3sThreaYeCPA=)
                          8: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:82:b4:75:0c:6d:67:28:08:33:6f:77:c7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=95207300e568ddcd77cd98606a236d93828db8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:55:bc:9e:9a:ea:46:0c:24:18:43:a2:40:
                    26:88:30:18:5c:2b:86:d7:15:7a:71:e8:3f:12:3d:
                    28:36:fd:e0:a6:26:bc:81:dd:59:36:c1:4b:2b:e1:
                    22:bc:c8:2a:48:74:64:86:0d:09:ae:6c:ee:29:55:
                    51:25:c3:4e:8f:19:ef:49:0d:b0:7f:a2:f5:15:e0:
                    bd:4c:cf:9e:54:14:f7:61:20:34:73:89:04:78:dc:
                    fb:75:6f:f5:35:24:e4:9b:e2:bd:58:1a:8b:f0:17:
                    a5:8d:0a:04:53:d9:d3:2d:70:20:3a:e3:17:5b:3c:
                    5b:ba:2a:ea:e2:f1:29:67:cd:96:df:f5:04:1a:2b:
                    ee:af:f4:c9:91:3b:d7:78:f0:0e:1c:b0:60:9b:16:
                    da:40:c8:6e:e5:6d:98:80:5c:c8:e3:90:72:d0:f5:
                    3d:e0:b9:37:69:15:73:63:f0:34:b3:0d:dd:53:95:
                    2c:14:27:7c:d1:17:53:19:09:31:77:ca:a9:be:d3:
                    f4:62:6d:2b:a2:b5:2e:a5:d3:fe:a9:af:a9:a3:dd:
                    3e:5f:0b:1c:ca:d7:61:5c:07:32:54:de:c9:34:d2:
                    64:ed:d2:0e:5b:9d:cf:42:56:b5:5e:2b:79:68:50:
                    9f:5b:56:f2:5f:a9:1d:ac:b0:e6:4c:73:aa:6a:98:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:20:73:00:E5:68:DD:CD:77:CD:98:60:6A:23:6D:93:82:8D:B8:DC
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:71:90:b3:ea:a2:e3:ed:48:66:7d:38:47:7a:58:6d:4f:
         26:05:4d:f3:91:90:e5:d1:6b:f3:d9:89:56:51:a5:10:a4:46:
         40:1e:4c:1b:e8:b3:86:7a:50:4a:be:5e:a5:6f:d7:8f:f0:a7:
         cf:d9:a9:86:40:8d:4b:e2:c0:93:ef:92:69:5e:5d:33:aa:8a:
         25:d4:48:d8:45:05:11:8e:3d:d2:f9:d6:3c:06:f0:7d:f1:e1:
         9b:a7:32:7d:70:91:44:90:64:9a:0d:8d:6b:66:9f:38:2c:eb:
         07:4e:64:09:94:29:9d:ee:75:4e:5c:39:ff:09:79:d2:c0:cb:
         36:29:b1:a2:9b:35:6d:7b:17:51:d7:27:b8:87:75:de:93:f7:
         0f:f9:4e:ac:7e:43:16:2a:6a:ac:d8:5b:c4:cf:8d:e2:53:e8:
         53:d1:70:16:87:88:2c:b0:44:c2:00:3c:02:02:e0:24:64:7a:
         dd:2d:dc:6f:6c:af:d7:a4:c2:38:9c:20:aa:99:47:c4:3f:4f:
         62:a4:70:96:46:3d:a8:20:29:a1:52:d7:fb:e5:0d:b8:08:7f:
         dd:e4:ed:b1:c6:c3:20:77:01:29:e0:92:1b:7c:de:01:96:f2:
         fb:de:4a:e9:e6:73:2a:44:e1:12:52:5b:3f:7f:f0:70:f2:bb:
         59:7a:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----