Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File:                     8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier:          FulovyeBEz5Y9H9yjFSiMxXYRhIpcxoEqK/nhtmYmF8=
Subject key identifier:   D7:07:34:09:CA:2B:81:32:3A:50:4C:10:17:E8:A7:4B:2E:9A:0C:9D
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer:       /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial:       01962DF3FF579E54C0C6E0F83C375095B6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number:          0D7B
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 2D/FZi352SsM0nqKQcFus+HWOaSdcbgmH1iq9gf7wTo=)
                          2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
                          3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ff:57:9e:54:c0:c6:e0:f8:3c:37:50:95:b6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=d7073409ca2b81323a504c1017e8a74b2e9a0c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:09:49:bd:0b:a0:c5:7b:d2:3a:c5:eb:77:
                    80:11:a5:9f:89:a7:22:6b:e9:ac:c6:8b:cb:4e:73:
                    58:da:33:75:21:a6:93:ae:c3:3c:54:2b:3d:26:73:
                    65:68:40:22:eb:a6:9e:84:f8:f6:1c:49:d3:09:e9:
                    ca:f5:25:ec:37:f5:fe:ad:32:f0:b6:65:44:a8:05:
                    90:02:de:96:c2:58:83:88:9a:7c:0e:08:39:02:c7:
                    90:80:0f:cb:03:cd:93:f6:ae:81:87:1f:f0:53:14:
                    86:a7:d6:88:f7:9c:7d:81:cd:4b:88:4a:35:af:99:
                    43:2d:5d:7a:08:03:96:c0:b9:14:2e:cc:42:00:4d:
                    bf:d1:b6:6f:61:3a:d4:20:8f:8c:f6:05:44:94:31:
                    71:62:6b:7e:7e:d8:67:ba:67:36:fb:e4:91:71:45:
                    a2:45:31:89:92:77:80:47:d8:05:4c:f4:d2:aa:fe:
                    ba:3d:ea:04:2f:37:a5:f0:d9:1b:7d:a1:65:1b:6a:
                    fe:fd:04:f3:42:68:ef:02:7d:6c:60:bf:d3:6b:8b:
                    10:91:8c:d7:1a:0d:82:00:45:05:e7:f7:12:fa:88:
                    81:ed:b7:1b:de:f2:af:fd:b7:ac:7b:52:bb:a3:77:
                    5f:5a:5e:61:9f:13:37:15:a7:72:09:8e:a3:4d:c8:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:07:34:09:CA:2B:81:32:3A:50:4C:10:17:E8:A7:4B:2E:9A:0C:9D
            X509v3 Authority Key Identifier:
                keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:28:cb:d6:07:8b:51:48:c6:8b:49:43:de:93:14:a9:a3:b3:
         ba:d7:81:b9:9e:57:a9:cb:aa:ea:2f:aa:c7:e6:bf:23:95:aa:
         18:57:b8:a5:54:a1:c3:c1:78:62:d2:5d:90:aa:b4:9d:a8:6a:
         b7:12:f7:46:0c:e7:d4:91:a7:0c:c8:35:6e:f8:8b:96:46:ac:
         58:66:1a:c0:2d:1f:97:4a:93:a6:89:de:56:53:97:01:df:0f:
         6b:4c:1f:46:41:c6:ee:05:46:55:78:43:3b:ce:e9:80:cb:75:
         7b:0f:9e:b8:6d:5b:a5:9b:4c:8f:ff:fe:04:1a:d1:a3:e6:ec:
         f8:68:50:1c:8d:dc:dd:db:58:e7:26:ed:75:8d:51:8c:f0:36:
         0e:02:d1:a0:ed:f0:fe:1b:df:f5:cd:1b:0d:3f:60:cf:3c:ac:
         d0:85:88:89:23:18:6b:68:a1:86:89:1c:e6:3c:4b:ec:33:7d:
         e1:f6:86:be:d2:60:76:16:0f:bf:78:b0:a0:51:ab:bf:a8:92:
         d2:97:f8:b5:69:9d:8b:55:6f:9c:6f:20:13:28:08:21:ea:3c:
         c9:96:b9:4e:a6:9a:d6:73:e7:03:e6:ec:07:52:9e:17:12:65:
         ee:15:8f:8a:e1:0d:08:a4:00:ec:39:6a:b5:24:83:53:b9:c2:
         03:e0:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----