Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          cMKNpuhLV7WKBGFB97O4l1Ng6Q2EotMMjpVTaVm/yd4=
Subject key identifier:   25:C2:BB:60:7C:6A:EE:A9:B8:E6:FC:CE:F0:6B:5A:ED:25:F8:A4:23
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       01962E2B0D0F0B6BE396DB3046753FDB5B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: o5fcbg0isO3guCCiwf1qS9gRCn8WZzp11ihRjXCp7NU=)
                          2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:0f:0b:6b:e3:96:db:30:46:75:3f:db:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=25c2bb607c6aeea9b8e6fccef06b5aed25f8a423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:a5:ab:ce:31:7e:e5:62:89:68:c3:90:83:
                    6f:0d:6d:fb:f7:2d:bc:df:06:5f:d6:69:51:85:17:
                    9f:9a:32:a7:c1:7e:4a:c7:a7:1c:f4:02:dd:3b:eb:
                    49:43:69:8a:9d:ef:53:08:d9:41:56:39:5c:0f:d0:
                    b8:c3:3a:85:75:aa:b3:47:43:3d:e2:ce:77:22:c0:
                    8f:f2:dc:fc:85:fa:fa:35:d7:f7:7d:f9:7d:e5:42:
                    63:50:ee:96:46:83:d5:23:cb:d2:36:da:f6:cb:7c:
                    e5:a9:03:9a:3d:56:64:6f:8d:87:d1:32:ee:c6:96:
                    ae:76:f5:4e:06:b6:45:71:db:06:dc:ca:eb:76:8a:
                    7e:09:1d:fc:3c:c6:c7:5d:b3:7b:f5:5f:75:e3:2a:
                    8c:e5:c7:b2:5f:e1:ed:70:39:eb:c6:87:e0:60:84:
                    a4:d6:1a:13:4f:58:8b:ee:01:33:e5:71:ae:2a:0d:
                    95:45:e1:ab:bf:d4:83:5d:41:58:47:66:75:f4:32:
                    44:e8:f1:af:70:b3:8a:ea:53:83:72:ba:d6:3d:ee:
                    77:af:e6:bd:f7:83:0c:25:ed:c0:fc:d5:b9:76:4b:
                    36:bf:77:b3:f7:2f:ec:6e:85:db:7f:0f:3c:4d:69:
                    97:e0:52:e6:7a:52:7c:cf:80:cf:6f:db:72:90:22:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:BB:60:7C:6A:EE:A9:B8:E6:FC:CE:F0:6B:5A:ED:25:F8:A4:23
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:ad:f9:2f:06:eb:ed:18:d0:30:40:31:56:53:85:09:b3:
         27:c5:27:58:47:85:a9:1f:f4:00:31:1b:cf:94:fd:7e:ec:3a:
         60:6c:5f:fd:fa:f1:26:75:50:65:21:9a:2d:f0:81:e9:d4:0c:
         af:31:e3:17:9e:d7:98:7f:26:ca:36:38:bc:8a:a4:40:f0:3d:
         63:80:11:78:22:12:c5:6d:be:b3:f9:db:33:ec:06:95:a3:92:
         8c:7a:04:0a:a2:dd:8b:6e:82:32:70:3c:f1:90:65:ab:a2:80:
         eb:5e:93:10:2a:89:60:46:34:a9:5f:1c:8a:ad:60:63:7b:bf:
         24:05:ed:04:d9:fc:41:17:db:3f:10:fb:cd:57:bc:4e:18:2b:
         6e:9b:51:7d:dd:6d:db:17:2b:e0:7d:eb:b8:aa:ed:67:16:61:
         05:1f:68:d9:57:a2:73:0e:9c:2a:55:9c:85:91:7f:c9:83:26:
         b2:25:07:92:a7:95:3c:45:5e:6b:e5:f0:88:85:fb:ff:78:9a:
         3b:e7:7a:ad:ed:94:e9:69:d4:44:b7:20:fd:91:7e:b5:8b:40:
         5b:9c:1c:7b:fc:eb:cd:04:66:2e:9b:6c:c8:fa:49:30:c4:57:
         04:ed:3d:36:c7:cb:71:f1:ee:9d:19:3e:a5:93:23:02:78:a7:
         92:9e:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----