Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File:                     fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier:          4Yz7keOiYsoV4U2EDJQrMaZ4GBGeHMl0QhwrCovLtmw=
Subject key identifier:   49:63:F8:8C:50:2D:8B:D5:8E:6F:00:9A:08:8D:5E:7D:0F:D7:74:5A
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer:       /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial:       01962F3DB65EBE8791AA2ECC4A98C839F9CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number:          04C9
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: 4guh0imVhzw0VcVOqMr1hEqMAjUN4G3nG8lGIntf1ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b6:5e:be:87:91:aa:2e:cc:4a:98:c8:39:f9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=4963f88c502d8bd58e6f009a088d5e7d0fd7745a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:61:56:3b:34:a1:29:dd:ee:15:93:0d:06:
                    2c:e7:69:7f:92:11:09:8d:4d:4c:c7:9f:40:ea:84:
                    91:31:32:b9:c5:ee:53:fa:de:43:6b:c3:45:5a:72:
                    87:d8:bf:1f:1a:26:aa:b0:f2:9f:db:2c:86:d4:e4:
                    88:69:32:65:a3:70:dd:15:32:d5:ae:b3:5a:af:fe:
                    a6:e6:c8:d7:ae:e1:0b:3b:0f:8b:8e:9f:a9:c3:66:
                    40:1b:58:cd:a7:2d:08:ae:96:63:ba:78:cf:92:11:
                    40:ce:1a:31:ea:72:d7:18:58:4b:97:16:4e:4d:b7:
                    9d:eb:54:44:59:83:15:20:6e:fe:e3:cf:9f:0c:08:
                    c6:38:13:7e:0f:13:03:81:19:0e:6b:1b:72:28:64:
                    f8:fa:51:eb:52:24:c6:5e:5e:61:6b:38:d5:dd:fb:
                    4b:88:fb:e7:ee:95:65:7a:97:87:fc:41:d1:af:d4:
                    41:7d:01:54:f4:ed:8e:0d:fa:0e:dd:4c:e1:fc:5f:
                    69:00:f4:02:b5:18:74:fe:7f:1c:5e:44:c7:04:7d:
                    32:e7:37:5e:24:4d:43:01:55:5a:e5:b4:45:4a:f8:
                    65:b8:a3:6d:de:f0:f1:a3:67:04:73:a7:9f:09:a7:
                    5d:0d:f3:4d:cf:55:95:27:25:60:60:7b:a6:00:9e:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:F8:8C:50:2D:8B:D5:8E:6F:00:9A:08:8D:5E:7D:0F:D7:74:5A
            X509v3 Authority Key Identifier:
                keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:fb:d7:4c:27:59:7a:84:5c:91:fe:bb:94:83:b4:54:54:
         ab:2b:f8:52:f9:f7:1c:0a:f0:fc:9d:77:21:bf:6a:dc:42:8d:
         63:bd:b6:ed:f5:27:ea:4a:0b:e2:6b:9c:70:d9:5f:35:c0:b8:
         4c:18:e2:be:df:24:03:c1:18:05:fa:09:6b:8a:5f:bf:ae:7c:
         e0:23:d8:0d:c0:ab:32:0c:a2:09:8e:f9:26:b6:27:2c:f8:0c:
         94:23:6c:5e:53:5f:8c:83:49:d4:d1:4b:06:92:a4:0c:10:4f:
         77:28:6c:fd:2c:e2:73:2b:d0:2f:64:b1:b6:77:f3:a6:9f:f4:
         f4:f2:02:13:46:c4:1e:0e:12:ff:6e:72:5d:4c:ad:80:ad:18:
         c0:bd:45:61:93:e8:f1:34:64:64:af:9e:fe:8a:16:78:04:22:
         b6:2d:42:a9:77:55:da:2b:0a:e2:d3:77:bf:9a:50:7c:35:5f:
         80:fb:fc:7b:2e:25:f2:1b:f6:18:2d:59:32:43:7a:d8:e0:ea:
         94:4a:e6:b1:84:04:15:5b:4d:56:b6:68:c6:f7:ed:9a:3e:03:
         bb:5e:13:d9:c8:03:0b:48:c6:2b:90:b8:ca:60:47:1a:01:28:
         fa:76:77:8a:fd:3c:57:33:9a:f1:46:4c:93:03:6c:f0:85:d9:
         71:dd:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----