Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File:                     rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier:          43KomCgnL82+QKydjDF9rH5p4JGTC3ugr5izxZ22UGQ=
Subject key identifier:   19:25:50:B2:D9:44:EF:6C:DD:A5:6F:A9:0C:B2:E8:06:DD:33:70:7C
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer:       /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial:       01962E2B32CC21F19D3B541E08CA23A26903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
                          2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: aOUWmeQE0nVOU3gmJT/DdAnmeZWZIKBJQnJ3CEKHQwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:32:cc:21:f1:9d:3b:54:1e:08:ca:23:a2:69:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=192550b2d944ef6cdda56fa90cb2e806dd33707c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:c0:24:a0:5f:49:12:47:6d:04:3e:99:de:
                    f6:fb:2b:fe:8a:be:00:2f:36:11:b1:72:db:85:a7:
                    a1:e7:48:2f:55:75:4f:e1:1f:7e:1a:32:c1:33:f4:
                    f3:fd:c8:93:97:b7:c6:a2:6d:46:db:2a:0c:95:1d:
                    88:0a:ae:75:71:92:9a:d9:dc:5a:ba:e0:fc:89:32:
                    4c:bd:28:85:7c:48:2a:89:4f:fc:58:1b:c7:38:c8:
                    0c:5d:c1:1d:3d:da:af:82:80:b8:38:5f:c5:ca:db:
                    00:69:7f:da:b8:69:1b:37:f7:d3:31:7c:a1:1b:cf:
                    38:9f:c3:99:c2:67:7b:25:6f:5f:fd:db:38:46:bf:
                    c2:34:47:ce:e7:19:31:e2:79:ce:b0:4c:5f:54:2b:
                    7f:2e:40:b7:d4:54:27:47:a2:72:58:24:84:d0:d9:
                    c8:00:26:6a:da:95:86:29:66:8d:d1:b7:f5:94:45:
                    cb:bb:4b:24:95:c9:38:60:cc:dc:67:bb:18:c1:aa:
                    ec:a4:49:c4:64:ca:d3:fd:d0:e3:76:3e:e6:33:43:
                    56:34:b1:9a:ee:73:2d:05:44:97:77:02:49:fa:68:
                    53:de:96:17:f4:08:0a:a9:55:ac:87:99:63:ff:8e:
                    8c:90:fc:3e:2c:00:b1:06:36:09:98:45:8c:0d:97:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:50:B2:D9:44:EF:6C:DD:A5:6F:A9:0C:B2:E8:06:DD:33:70:7C
            X509v3 Authority Key Identifier:
                keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:04:a1:be:00:6b:1c:3a:d4:48:7f:8f:e1:d2:c5:7c:3d:
         a9:66:36:df:30:07:c5:69:37:f3:bb:e9:0a:c4:9a:73:e8:a2:
         05:3d:2e:44:a2:1f:e1:4c:80:76:04:7b:65:32:12:64:4b:94:
         e9:5a:33:13:e3:d4:0b:0d:d7:fa:27:4e:b1:a7:3b:a2:03:ee:
         b3:77:db:84:11:53:e2:62:3b:c8:54:ea:33:9e:78:1b:2b:91:
         0f:41:6f:15:4b:24:60:b0:b8:e0:0b:4a:1c:86:c0:52:be:1d:
         f9:3e:02:43:14:3b:b5:a0:ae:f7:c2:f8:c9:cb:15:bc:58:4b:
         a8:8f:f4:9b:6c:cb:12:c0:ac:52:30:f9:e2:25:46:c5:eb:e3:
         b1:4c:c3:de:90:26:fd:ea:c6:c8:fd:32:c4:d4:14:64:85:f0:
         d0:03:6b:1b:dc:2c:f7:2e:5c:8d:f3:7f:ba:fa:77:03:e5:67:
         79:f7:52:19:b9:bd:a5:e8:45:73:07:90:91:ab:c5:b2:7c:38:
         16:49:a4:52:cd:bd:a0:c5:fe:aa:1f:f7:5e:7e:bd:c0:71:b4:
         41:38:58:15:5f:5b:19:e6:f6:9d:d0:77:44:30:98:e3:ab:a1:
         dc:28:19:d5:f7:ab:cc:bd:11:ea:c6:79:ee:b6:55:af:6c:1e:
         11:20:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----