Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File:                     tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier:          R4+m9bKPsFIshlg/WQmGptpYE/lXH/OO9xGOwfkFNGQ=
Subject key identifier:   F6:75:16:72:61:C7:72:E6:5D:FD:65:C0:41:7E:D8:6A:8F:63:8B:72
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer:       /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial:       01962E98CB1757B564F65A4C904EE0219188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: 7xCNQAAWQNxVlXv3mxLftg7dIe6SHdOsjE+TV1aOAcg=)
                          2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cb:17:57:b5:64:f6:5a:4c:90:4e:e0:21:91:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=f675167261c772e65dfd65c0417ed86a8f638b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:51:10:12:50:17:34:7b:17:f0:1a:85:8a:
                    2e:ae:48:ae:b0:36:cd:37:7c:f4:9d:25:77:c2:a7:
                    9e:66:dd:0e:52:c3:44:a0:8d:f9:9e:ee:b3:5e:06:
                    f6:83:9c:41:32:89:ae:1f:d8:d6:a7:22:46:6c:0b:
                    84:c7:4d:54:e7:26:31:eb:30:10:62:1b:48:65:da:
                    a1:b6:41:fd:fa:6f:67:29:fa:ae:b8:39:02:2a:0c:
                    6a:7b:da:fe:9b:4e:db:96:bb:f5:a4:f1:2d:80:7d:
                    77:6e:5f:0a:2c:83:c9:ac:45:0c:71:42:55:ee:01:
                    51:be:31:0c:c0:ba:cf:28:35:b7:63:0a:9b:d9:30:
                    97:fe:d6:0a:47:bd:f6:b4:f4:6d:18:5f:c8:57:19:
                    30:10:3c:47:cb:c9:ee:f3:bc:8c:84:4d:96:5e:f6:
                    45:25:81:81:d7:0a:fa:e4:ba:dc:3f:43:db:62:bf:
                    0e:5b:c6:f7:71:aa:30:f0:e4:c2:b6:2a:b5:02:c0:
                    6a:cd:b4:6d:c9:57:62:f1:17:58:49:2c:a5:09:5c:
                    07:22:82:67:1c:fd:c2:ff:99:b9:d0:6a:35:ed:7e:
                    0c:60:91:10:b9:e9:54:a7:6e:86:a2:ab:81:75:3c:
                    a5:25:cd:35:f2:ed:f5:85:c7:e1:fb:e2:6d:60:86:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:16:72:61:C7:72:E6:5D:FD:65:C0:41:7E:D8:6A:8F:63:8B:72
            X509v3 Authority Key Identifier:
                keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:fa:75:02:ff:34:ab:35:63:b2:25:bf:1b:b7:a3:93:89:
         f8:9e:16:b8:ce:6f:76:25:20:f2:8d:fe:98:41:69:f1:38:4c:
         8f:57:6c:e7:85:a9:2b:ed:fb:9c:da:20:13:17:87:cd:8c:f7:
         b6:a0:ee:c4:b4:75:9e:34:b7:cb:12:c0:50:11:13:e3:b5:5a:
         40:25:71:0c:67:3d:bc:72:89:7a:4c:a9:b3:2b:75:82:05:e8:
         2d:f1:de:c5:b4:4f:cf:97:9a:1e:56:c0:dd:84:19:09:9a:00:
         d0:79:57:7b:8f:f8:ea:7c:cb:df:62:b4:96:48:0b:4f:fe:f3:
         ab:e9:33:13:8e:f1:23:90:8e:cb:f6:41:a5:91:bc:b3:12:44:
         c1:85:da:b6:18:d1:e3:5f:c8:cd:c8:b3:9b:23:b8:e0:02:c8:
         34:24:76:b2:14:f9:9f:c5:ce:66:ae:4c:d8:06:6e:dc:93:4f:
         0c:ef:58:e6:02:7a:7b:96:25:10:2a:bf:2a:ec:0d:b7:b9:d9:
         35:bf:ae:0e:78:ca:67:6b:7a:b8:be:83:fc:66:de:83:03:c3:
         e6:6d:c3:a6:ab:ad:16:b3:2e:f2:91:06:dc:af:1c:2f:e9:04:
         19:66:29:46:f9:d7:cf:56:03:d0:1d:21:ad:09:f8:d6:45:f5:
         34:e3:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----