Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File:                     _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier:          djacerx0FAMOJzi6YKy+WFp8vyx8soD5GvokVOS1wP4=
Subject key identifier:   B0:5E:89:A0:43:94:D8:0C:62:A0:AA:FC:CA:47:F3:7C:19:15:FC:DF
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer:       /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial:       01962E994F39A8488F97F955BBF765FFD6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number:          0F0B
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
                          2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: IgR4EABL0tZIHFSfL9gTlZwU72/gElK3DoKy1vK2A1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4f:39:a8:48:8f:97:f9:55:bb:f7:65:ff:d6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=b05e89a04394d80c62a0aafcca47f37c1915fcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:77:bb:88:5f:9c:b8:56:bc:e3:ed:0f:c0:
                    7e:47:c6:a4:35:3a:d6:ed:96:3f:05:45:99:c6:11:
                    f4:c2:12:97:ad:4b:9b:a8:29:00:cb:1b:70:e8:7d:
                    12:a3:91:13:90:51:17:ce:58:3b:24:0f:07:df:e8:
                    53:f7:3b:e9:5a:da:7f:cb:b3:9f:53:9f:b9:a7:b8:
                    0f:2b:20:17:16:b8:fb:f7:02:80:9d:89:8f:1d:1e:
                    af:76:34:f7:2a:9f:05:7f:63:09:b2:cb:be:96:6a:
                    8b:bc:61:ca:ed:1f:8d:35:9b:4e:60:9c:dd:a2:f6:
                    db:e6:39:c4:15:d9:57:3c:4f:ad:03:53:23:59:b5:
                    7e:1d:78:38:f7:d6:26:67:e2:a2:cb:92:fd:90:df:
                    ff:26:43:3c:a1:c2:65:de:52:d8:1a:34:ea:3e:20:
                    ad:f1:d6:2c:f7:a2:68:50:c8:ce:62:70:00:82:47:
                    f3:5d:1b:17:c9:ad:2f:79:6a:23:0a:22:1c:d4:a5:
                    5b:c1:27:b4:d9:f5:37:52:72:52:49:0c:15:70:20:
                    f1:72:b4:ac:55:5c:be:41:a0:28:69:ad:fe:4d:e7:
                    60:f4:fc:bc:5e:ff:3a:2b:2b:da:10:2f:76:b8:e3:
                    37:cc:9b:2e:86:6f:23:e1:40:86:80:b7:6f:67:ac:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5E:89:A0:43:94:D8:0C:62:A0:AA:FC:CA:47:F3:7C:19:15:FC:DF
            X509v3 Authority Key Identifier:
                keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:b9:72:c1:ff:b2:94:04:10:17:8c:09:7e:25:7b:20:8f:
         3a:60:f7:74:fa:0a:b3:bf:d6:fa:bd:39:d2:c8:88:fd:f4:d6:
         df:71:7e:94:83:f5:b6:de:e1:46:30:07:1e:b7:ed:0a:6d:e6:
         54:62:16:61:30:e3:1c:30:8c:b8:35:24:52:17:55:40:d0:3f:
         24:eb:69:dd:af:a7:4d:c6:de:ed:4c:c6:8f:84:93:e3:cf:16:
         b4:e8:3f:b7:b9:90:c0:8d:4b:76:b3:dd:85:9e:b1:a6:bc:9a:
         29:2d:68:03:89:23:6c:f9:58:af:f8:8f:31:a4:40:84:6b:8e:
         6c:d2:df:41:60:3a:29:c8:d5:d2:83:4f:3f:17:91:3a:9a:c0:
         83:28:b8:73:a9:bc:2a:09:25:95:d8:be:a0:d0:46:ed:2e:28:
         98:5f:32:01:26:68:a5:6f:91:f9:ee:37:31:8c:a1:5a:2c:39:
         fb:0c:16:f2:ec:4d:36:83:7b:c3:9d:e6:94:27:29:6c:ea:f3:
         ed:b3:b9:5a:21:96:9a:cd:d1:ab:6c:21:01:9d:c8:e7:85:4c:
         2e:1f:4e:ee:e6:ee:5a:15:86:46:3f:58:a7:32:cd:af:f8:fb:
         c1:17:ae:51:bc:9c:f9:00:ac:ae:c4:70:b5:15:85:d2:e9:e0:
         40:1f:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----