Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          0Urwgcth6+zA6yBJ2MZqGoy4Bg4jsFMNZlEBmmyQALQ=
Subject key identifier:   41:4F:07:7E:FD:BC:5B:26:C4:52:63:B0:12:4C:97:35:46:47:0C:9C
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       01962DF437B5AD598738421B292A19051AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          0D7B
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: RYsxXwyfH69z3BexUKnJUtHwPvS+BFsmPnQ3ue4iIqE=)
                          2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:37:b5:ad:59:87:38:42:1b:29:2a:19:05:1a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=414f077efdbc5b26c45263b0124c973546470c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:6f:17:bc:93:c2:3c:1e:64:c0:66:b1:f5:
                    5f:32:9f:f6:f9:9b:a3:ca:f4:14:c4:10:87:03:3b:
                    88:a7:59:93:7e:e5:b0:c1:24:b1:c9:15:1f:95:38:
                    e9:0a:2b:d9:49:48:e8:eb:72:02:65:bb:f8:74:f1:
                    be:e2:7a:ce:06:93:71:5f:12:b6:3a:be:30:bd:c9:
                    b8:c0:37:75:64:21:d4:4b:8e:ec:9e:93:b0:85:80:
                    cd:d0:69:68:3c:1a:2f:a7:ab:16:dd:a6:6c:d3:52:
                    f2:7d:fb:f7:db:07:68:81:89:76:ca:83:1f:a8:1d:
                    db:e7:59:00:a4:eb:79:9f:dc:f0:be:ab:d8:f0:2f:
                    98:17:04:77:52:d1:a8:60:7a:b1:dd:70:ec:ee:22:
                    b0:f7:64:41:98:0f:12:89:21:13:be:b9:bc:93:1d:
                    f3:a5:0b:3c:92:76:2b:62:e5:3d:c1:bb:3e:d0:15:
                    05:c7:3c:16:bc:f0:f5:c6:31:65:3f:d9:ba:33:18:
                    ac:5a:fc:44:3b:47:bc:b4:7d:62:34:9b:11:61:a8:
                    87:1f:93:e4:b6:cc:23:b9:bb:c5:b7:76:eb:74:5f:
                    19:31:a9:e5:30:ee:40:11:78:68:fb:bc:57:3d:e2:
                    f1:30:4f:7f:22:07:42:ec:13:4f:da:74:e3:7c:4a:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4F:07:7E:FD:BC:5B:26:C4:52:63:B0:12:4C:97:35:46:47:0C:9C
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:a7:cc:af:c8:7b:50:82:18:0a:5d:58:3f:9a:a5:7a:3e:
         51:f0:13:60:ac:a6:c2:af:61:4b:ab:20:a8:ff:33:45:ff:7e:
         53:85:bf:55:5d:88:31:4a:ca:9d:f8:e0:a7:ed:a6:48:e4:73:
         47:89:6b:ee:ba:68:fb:40:3d:c7:5a:8c:4f:b4:30:0f:ed:1d:
         3a:42:4d:d9:12:ef:0d:08:c1:f7:c0:64:2e:72:5b:c1:e2:0a:
         90:2c:97:ba:b7:07:ec:db:8a:29:65:3c:cf:d7:d3:6e:b8:94:
         35:dd:39:a8:af:7e:b6:5e:11:e3:6a:f1:94:44:20:27:32:67:
         10:20:8f:ca:23:db:f5:d8:ad:43:54:2a:91:16:8b:94:a5:98:
         90:ee:09:6c:cd:77:02:db:fa:1d:59:1e:60:33:a9:45:c7:4a:
         9f:6a:1f:66:6c:36:72:28:f5:cb:a8:d4:2a:06:9f:84:78:a1:
         ef:4a:63:6c:63:fc:22:0b:a0:af:3b:5d:e6:88:8c:b3:3e:ad:
         0b:f7:d2:79:bf:7d:bb:ba:a3:a7:ef:bf:19:32:b1:48:d2:82:
         07:48:79:58:1a:55:df:62:3b:43:96:a6:69:06:40:ba:b5:91:
         d0:38:5e:2e:5d:f0:92:1b:ff:9b:c7:88:e2:8b:a4:74:74:51:
         7e:0e:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----