Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File:                     1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier:          6U3M0cJPxsPyb4DHTr6REi3ToB7E7SOpWRFNB0qz2rs=
Subject key identifier:   06:05:40:0B:22:FB:CC:67:BF:D5:FB:CA:0B:5D:68:5D:16:12:E6:06
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer:       /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial:       01962ECF961D7C31E0AA24EF1F5DDBE88766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number:          0631
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: Bhq7T4j1UNVK3L4NeOWdqQVbspsIu60AOcO9mt4TVH8=)
                          2: 6r4H1bkA6HQBHKzqndzkbGN-fLc.roa (hash: aHRcxKC7eM9v241orSIrtl55ETVWmoxd9czIqtemS2Y=)
                          3: yZKr3MkjOL236i5PxJm5JOrjeZQ.roa (hash: P3Sg9X6HUsmoHVeRhUz452rlFrDzI8l8SS7MoZsVvQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:96:1d:7c:31:e0:aa:24:ef:1f:5d:db:e8:87:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=0605400b22fbcc67bfd5fbca0b5d685d1612e606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:5d:2e:3e:6b:56:51:c8:a6:91:b8:da:b7:
                    37:d4:90:f1:2c:1b:0c:5c:3f:ec:16:ce:45:77:d7:
                    25:0f:b0:3b:cd:26:2c:2c:03:20:01:25:83:e2:5c:
                    60:6c:08:4d:de:77:10:e2:23:d2:73:b5:bb:b0:b8:
                    3b:33:81:9c:dd:f5:c4:e8:4c:24:3a:f7:f9:3d:7f:
                    18:72:a3:8f:12:1d:b5:d0:cf:a6:66:02:76:da:a3:
                    1f:f9:93:70:4a:cb:c0:3d:60:cc:53:a1:fd:00:e2:
                    78:f4:4b:b7:36:57:fe:dc:7f:18:1a:d9:76:28:11:
                    2f:0d:b0:d5:cf:ac:19:1f:1f:f9:0a:a8:3e:3b:3d:
                    d1:70:09:a4:91:af:c3:7d:85:14:02:ea:ed:0f:84:
                    68:64:9c:1f:92:5c:75:18:72:17:82:fe:0e:6f:10:
                    fe:6a:8d:b4:df:28:5c:69:74:09:6e:cf:8f:29:ad:
                    7e:9d:92:39:56:7b:d8:58:7f:b5:78:3a:df:f2:ec:
                    8b:71:74:7b:1d:a2:97:0b:9b:39:b2:73:91:b6:bb:
                    b9:94:1b:c5:d7:5a:b6:05:0b:0b:01:d6:cd:bf:3f:
                    86:ed:0c:c5:3b:13:94:dd:6d:54:9a:dc:6c:82:d9:
                    dc:9f:5b:54:04:36:e6:cb:c0:f6:1e:d6:8b:8a:1b:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:40:0B:22:FB:CC:67:BF:D5:FB:CA:0B:5D:68:5D:16:12:E6:06
            X509v3 Authority Key Identifier:
                keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:87:9e:9c:25:fd:d0:86:46:ae:03:0d:46:15:b3:8a:14:
         11:fe:fe:dd:50:7c:88:17:f8:6c:19:49:55:81:d9:3a:0d:b6:
         f7:56:07:49:57:14:cd:c7:f9:0d:26:49:b6:78:0d:8d:ee:6c:
         d7:51:37:89:a3:1c:45:18:f4:ab:13:79:b3:e9:a0:2e:1a:f8:
         47:2d:ce:f1:16:6f:cb:60:88:8e:9c:9c:e3:f0:e6:54:f9:e9:
         37:ce:6a:42:7e:e8:bb:56:75:8f:88:b7:88:96:aa:d1:6c:ac:
         44:48:fa:3f:fa:9e:9d:5d:4a:80:1a:30:4b:01:75:a9:17:0b:
         7b:d9:d8:a1:4c:7c:4d:05:55:54:57:df:d1:91:99:0f:8c:d7:
         40:73:e0:65:24:67:0f:01:7b:0b:92:00:af:fd:5e:37:76:b4:
         97:e3:50:6f:58:68:8c:3f:f7:ea:01:c4:27:6e:5b:7f:6c:f7:
         28:f2:b3:b2:a9:30:b1:b6:e2:9d:14:0e:ef:9e:ac:37:9e:e9:
         4d:dd:97:36:c2:a0:72:91:5b:9e:d3:ec:d2:f5:14:8c:0c:50:
         5f:d7:4c:1a:8f:f2:a8:20:8b:d2:ef:cc:ab:9a:4c:e5:e4:47:
         01:af:44:fa:a4:e3:48:89:2d:b6:9d:0e:4c:31:d3:b8:13:38:
         46:2c:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----