Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File:                     1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier:          3awvWarUuLDQizCQQlZjZ3KwtJ4RwPk3fqzc8SU1yDc=
Subject key identifier:   F2:36:53:62:55:61:9C:85:58:E1:83:88:F0:1F:B0:61:9E:F0:2E:32
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer:       /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial:       01962F0676D2E5F321170E62854701B57BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number:          0800
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: KsmJ5n0NBqv4MjwUNyGxmnFgVvpPBpac83SoutMJfUM=)
                          2: _KxvEwb-05zypoulu-kOqoL22-A.roa (hash: iIrzlSKXJeml3wWcOMj0MUUk02aq1R81c8+dmUXm/h4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:76:d2:e5:f3:21:17:0e:62:85:47:01:b5:7b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=f236536255619c8558e18388f01fb0619ef02e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:77:6c:10:98:a7:c9:c2:f7:2b:6b:7b:6d:
                    64:b2:f4:54:7d:6a:07:68:f2:50:6b:b9:94:8a:df:
                    17:04:78:b8:4f:9d:3b:04:42:64:3b:01:94:fa:14:
                    fe:9c:41:7a:31:b0:93:ec:4c:fa:ea:6f:17:01:25:
                    c8:ee:82:94:51:25:84:dd:43:5c:da:2c:8c:23:50:
                    88:5c:87:71:70:46:9d:01:f7:b1:83:cd:ed:d7:f5:
                    a8:bf:81:d3:3b:b9:a1:86:e0:5b:49:92:88:9c:28:
                    1c:92:1b:3f:7e:8e:a2:1f:ff:b8:d7:fc:7f:e5:3f:
                    00:49:4f:8c:89:53:4f:7f:ef:26:ea:6d:ad:a1:cb:
                    f4:f6:db:90:d6:57:4f:6b:63:ee:31:36:68:f2:a3:
                    8d:46:e8:1e:7f:b2:8d:45:ca:4f:59:54:6f:7e:6c:
                    27:56:75:0c:08:75:3b:ea:a2:59:7f:3b:dd:96:74:
                    f3:a6:31:14:90:ac:22:19:16:d2:a7:fb:92:8e:89:
                    b4:78:1a:77:1e:fb:c4:32:8f:b2:3b:e9:a1:44:9e:
                    2d:d5:7b:aa:43:1b:40:dc:b8:7e:6d:82:b3:d5:cf:
                    73:41:3f:fd:8f:b6:f9:53:f1:45:62:14:27:f9:2d:
                    3b:4c:68:7d:e3:dc:56:02:b4:b3:e8:6d:91:c0:a6:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:36:53:62:55:61:9C:85:58:E1:83:88:F0:1F:B0:61:9E:F0:2E:32
            X509v3 Authority Key Identifier:
                keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:06:19:eb:c2:75:3f:93:e6:51:23:9a:75:11:2b:fe:3c:
         e9:93:a8:51:78:f4:b9:c9:15:89:45:94:16:a9:ce:47:95:18:
         0f:1d:a0:f5:76:d3:7f:b1:04:f8:8f:59:fb:a8:a5:5f:7a:bb:
         a2:e9:d7:c8:92:69:5c:45:fd:a0:cf:95:c3:65:97:94:31:94:
         af:81:07:59:bb:8f:df:7a:f7:17:67:d2:6e:27:84:0f:9a:77:
         0b:95:a3:52:7d:fc:6c:b6:14:e7:20:00:0a:2b:1c:64:f3:c4:
         72:1c:55:f0:bb:54:ac:ea:32:b2:1a:60:ae:6d:97:df:aa:d7:
         21:c6:c3:26:f9:7a:40:8b:50:1e:b8:74:49:5f:a3:7f:0f:23:
         57:cb:ee:37:cf:5f:f5:26:21:80:b9:0d:fd:35:c7:1b:02:b7:
         91:f9:ff:5f:f7:40:9c:7d:c1:9f:bd:65:c2:b8:a4:82:2a:43:
         da:7a:c6:91:2a:78:27:2b:92:9b:29:2d:a7:e0:33:67:bb:66:
         93:a0:2a:a8:95:09:52:5b:1a:22:ec:3b:bd:14:83:9b:fa:4d:
         4c:0d:82:e9:a5:eb:50:a8:67:09:f9:74:81:09:3a:2b:82:73:
         fd:84:24:9c:a4:25:0f:03:99:b4:87:29:b2:de:39:a4:ee:b8:
         34:fb:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----