Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          I6XHkIY+ddnVRaDnOcTs2zRsxnZeTMuQWvINvTXVsrQ=
Subject key identifier:   CD:41:3C:38:0B:3E:0D:E9:C9:2A:C8:E8:A2:91:4D:15:CB:39:0F:75
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       01962DF4144DA6D9BFA9E558F4590C06FFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
                          2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: fV3i4W8BTdwYSq5yAFDv2jOOH4SOXPNC0OD9igopRgM=)
                          3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
                          4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
                          5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
                          6: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
                          7: y219uopaZvXSdvuyVN0z8hSAj3g.roa (hash: yOxEDrbHVzQ3D4oMaRFodYyQEbnpgrKDN1hHuSZgDh0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:14:4d:a6:d9:bf:a9:e5:58:f4:59:0c:06:ff:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=cd413c380b3e0de9c92ac8e8a2914d15cb390f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:83:6a:53:54:24:b8:95:12:78:f3:de:00:
                    7e:39:a8:db:f5:b0:75:99:df:cd:6c:fe:bf:9b:54:
                    f5:ba:e5:ed:9b:47:d9:d7:c0:b0:d6:b8:48:af:30:
                    f0:50:12:cc:c9:fb:6c:02:96:53:b8:29:b3:ee:6c:
                    65:d9:9a:52:ee:ce:b0:25:51:21:d6:29:52:d2:60:
                    04:cb:13:49:e1:dd:95:0d:a6:ca:6b:d5:82:08:4c:
                    b2:41:2a:a6:57:80:7d:70:7c:53:4b:0a:99:ec:20:
                    5d:d2:a5:d0:55:be:a2:52:28:e7:a9:2d:ef:51:18:
                    98:da:6a:43:5d:ad:0c:cc:4a:97:ae:05:85:a0:f0:
                    96:4a:50:62:21:26:b7:8f:18:88:b0:15:de:cc:82:
                    9e:1d:52:2f:b6:f6:80:c8:a5:b2:29:20:25:94:6b:
                    2e:a1:e7:41:4c:f2:ae:2e:b7:e2:a6:04:29:5a:3a:
                    c0:fb:14:8a:0f:c4:56:db:fd:34:77:b3:3f:14:db:
                    83:3d:b3:8b:0a:c5:e9:de:54:a7:26:a1:07:28:48:
                    40:be:31:16:17:37:8c:30:39:08:26:47:3a:0c:ce:
                    de:a1:af:5c:fb:e4:db:30:0a:65:48:fe:f4:f6:52:
                    94:0f:ec:3b:a7:fa:ea:45:2d:e8:49:e5:58:3b:f9:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:41:3C:38:0B:3E:0D:E9:C9:2A:C8:E8:A2:91:4D:15:CB:39:0F:75
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:ef:95:ac:fa:8b:bb:f6:e5:2e:60:04:8c:ec:7c:ea:0d:
         51:16:ef:6b:a3:03:58:59:13:87:35:61:27:b4:db:1e:e6:7e:
         9c:17:89:d9:45:e0:99:32:16:cc:f3:28:b7:ff:f8:d7:92:2e:
         87:c2:79:42:37:9b:f2:cd:73:f9:4a:34:91:1c:36:0b:45:e4:
         56:5e:72:7d:28:22:3c:63:2e:d6:2a:1f:75:75:3b:ac:60:b7:
         6e:09:df:8e:6f:59:54:c2:b2:bd:75:a8:06:39:91:35:84:5c:
         17:e6:6c:d0:fd:b0:76:65:a2:c5:0e:87:4d:5c:b9:75:49:d7:
         01:11:11:8c:08:ad:33:e9:f1:9f:79:70:93:f9:4b:b5:98:69:
         45:9e:bb:c5:4c:82:e1:23:58:0d:b7:21:37:d4:b4:95:10:a1:
         5d:3d:df:4c:f9:1f:6a:fb:16:9d:72:19:37:d4:d5:c0:93:84:
         8c:24:54:f3:6c:44:77:84:75:b3:c1:a9:69:7f:37:52:d3:06:
         1c:ee:97:16:f0:8b:b3:bc:a8:3d:17:bf:b2:ca:9c:d2:88:27:
         fd:95:0f:68:b3:cd:c7:e7:40:70:6f:bc:80:05:43:38:57:9d:
         15:19:3d:fb:be:ca:d8:d6:d7:34:59:56:18:82:43:9a:de:99:
         d6:dd:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----