Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          wjy8PS9Sk4OzbX5+kKqCXAQU1PCn+dY9hH7DIMEHlpk=
Subject key identifier:   91:DF:04:D6:EB:8D:11:E7:E9:48:18:8B:6B:60:68:53:16:0B:CE:9E
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01962E2B139E45027C4998B135BE56D7B0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
                          2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
                          3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: Q/GVdUZALGYNzj7ONK2OaKQ0+mXlfl5/GD92DmnF9+I=)
                          4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
                          5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:13:9e:45:02:7c:49:98:b1:35:be:56:d7:b0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=91df04d6eb8d11e7e948188b6b606853160bce9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:bb:97:af:10:51:87:5e:f1:c3:5b:09:67:
                    11:2f:fe:a4:bb:27:57:48:cd:86:48:da:42:ca:9a:
                    0b:66:d3:c4:02:13:86:c4:a5:c0:e2:08:74:5b:8d:
                    95:21:cd:a4:7c:31:79:77:29:fd:07:ae:21:93:27:
                    b0:c4:3e:cc:08:8a:c9:61:cf:0d:96:7e:ea:fc:53:
                    c5:81:4c:d9:60:10:b8:29:9e:5a:49:ed:52:13:f2:
                    89:9b:d0:25:c7:f6:20:0e:a1:48:ad:32:e4:01:5a:
                    08:52:2b:90:5e:6b:f7:98:96:3a:f8:e7:1b:35:ce:
                    89:bd:19:07:f4:bb:df:b1:cf:49:95:2b:10:f5:9d:
                    46:a2:8c:a0:5b:f6:5e:13:9b:86:4e:c6:b2:e8:51:
                    fc:3b:9c:ac:cc:95:69:a0:58:97:b6:02:ea:2f:0e:
                    32:73:53:7a:27:6b:f7:25:21:ec:65:fc:c4:5d:2f:
                    f9:fe:28:74:e3:cf:0d:0f:b7:39:db:7e:81:36:fc:
                    20:90:e0:c9:21:7f:39:cf:3a:64:69:a1:a4:d2:a9:
                    ad:b1:93:e5:19:1e:c7:a9:a3:9c:7f:96:76:e2:b9:
                    48:55:5e:21:be:3e:70:8f:ba:f8:20:66:00:69:a0:
                    38:c8:8e:5e:70:8a:5d:4f:24:35:1c:d4:66:38:70:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DF:04:D6:EB:8D:11:E7:E9:48:18:8B:6B:60:68:53:16:0B:CE:9E
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:15:4d:a5:5c:7c:32:93:80:ce:71:1d:10:c0:12:f4:0f:
         71:9f:0d:62:18:d0:d0:b3:e4:d4:c0:5f:dc:45:44:8c:f0:4b:
         13:bb:a8:06:af:24:f5:36:3b:fe:3e:e1:38:e6:36:6a:2a:f6:
         26:a4:15:d4:51:dd:bd:0c:c2:d1:ec:bc:2e:e2:0c:95:62:10:
         c3:90:1d:03:1b:6c:87:47:42:39:b8:65:e0:cd:3c:8b:dd:c8:
         53:16:70:7f:ea:0f:79:21:ed:ea:20:b8:8c:ef:36:68:74:ad:
         42:ca:55:c5:a6:c3:0d:c1:54:67:44:2b:4a:15:42:96:b1:76:
         18:c5:a6:f9:c4:60:2d:ea:e1:f0:97:91:88:50:df:eb:91:1e:
         b3:7c:01:b6:c7:34:59:fc:e1:31:df:12:44:73:39:5e:b5:96:
         49:64:ef:8f:10:87:58:68:39:1c:2c:a3:ee:71:19:bd:74:9b:
         85:76:e2:81:c4:c4:9b:04:fd:e5:1e:ad:fd:6b:60:2f:68:bf:
         3b:fd:d4:4b:9d:24:9a:be:33:f3:56:52:ec:ee:5a:a8:5c:36:
         cf:57:83:98:4f:d9:e9:b1:b1:13:7a:4f:83:ac:f1:f4:fa:fb:
         d1:62:fc:c8:ec:47:7f:c2:2d:e3:aa:a0:5a:73:ab:39:f7:c1:
         db:df:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----