Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File:                     fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier:          hXfuEGcubNk2s0iLLm6hqfpm9FeEOdyTadaR0ulgc2s=
Subject key identifier:   59:10:8E:31:39:47:98:AB:46:A6:3A:35:FA:86:7F:EC:F1:1D:B7:EB
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer:       /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial:       01962F3DDBBAB1867938BF5DDF60605494CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number:          0129
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: saEJTdwHSYKhP/PCVNRGgARmCuJ4N0kjibrIJgIkLnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:db:ba:b1:86:79:38:bf:5d:df:60:60:54:94:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=59108e31394798ab46a63a35fa867fecf11db7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0b:de:fd:54:1d:31:76:f2:75:ec:dc:c0:53:
                    57:65:6f:2e:46:fd:b5:46:95:ef:8a:69:38:47:96:
                    c5:57:37:91:5c:6a:09:c9:19:e9:c4:1e:99:70:47:
                    7d:c3:67:21:09:5e:d6:40:47:34:6e:68:c6:17:02:
                    7d:3d:1d:0a:99:5f:97:e3:8a:89:a7:c1:7c:3f:b4:
                    7d:d7:7e:00:1e:a0:e7:93:67:95:99:15:80:15:8a:
                    a6:0e:86:2a:19:7c:dd:68:65:60:c4:e9:3f:fb:b2:
                    22:35:50:e5:3f:9d:21:3f:59:ae:60:7a:9f:2a:ee:
                    44:6f:d7:e5:34:fc:9e:e0:ba:af:f6:d9:e2:3b:1c:
                    ed:50:20:fb:a0:48:15:02:79:57:40:5a:b9:89:e5:
                    dc:4c:96:17:74:73:54:50:0a:2d:47:59:91:bb:cf:
                    f6:1d:22:d8:66:ad:76:26:ca:42:88:3e:41:9c:c6:
                    75:f5:76:bb:21:a6:d5:95:87:59:16:d2:b9:93:5b:
                    f7:53:c8:da:88:a8:6c:aa:aa:2a:ad:21:21:57:f9:
                    56:34:98:ec:10:1f:05:c0:5e:28:82:9e:d1:33:81:
                    bd:c5:01:38:29:c8:3c:29:42:08:33:aa:8a:14:6c:
                    42:5f:a9:fa:38:02:e5:59:11:86:c9:a7:e0:fe:14:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:8E:31:39:47:98:AB:46:A6:3A:35:FA:86:7F:EC:F1:1D:B7:EB
            X509v3 Authority Key Identifier:
                keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:76:74:ba:1f:fa:9e:8a:d6:c9:96:7d:7a:47:d4:d9:17:
         c5:ba:b9:73:ac:e9:e2:6e:bc:c7:a9:44:de:38:32:d2:a4:2c:
         7a:52:cd:ee:84:7e:6f:1a:21:6f:63:f3:50:5d:23:1f:70:0d:
         88:fb:25:6e:e3:d9:1d:aa:1d:7e:e4:ed:69:87:75:f4:cf:b2:
         b7:c1:1b:df:3d:7b:1c:07:b1:6e:69:c5:19:69:49:7a:07:f1:
         64:a2:c3:cf:7f:12:33:89:2d:26:4b:e8:ff:45:2d:25:6b:af:
         ad:6f:84:b3:4b:b3:cc:e2:b5:bb:35:5e:88:58:7d:76:2d:58:
         dd:be:74:06:22:a3:a1:2f:c7:da:d8:8c:31:59:bf:60:b5:58:
         a4:3b:16:51:98:93:01:bf:59:1a:7c:08:39:9a:58:eb:89:5b:
         9d:22:1a:ec:33:f1:b2:cf:ed:f2:e0:4b:ec:e0:09:04:d9:be:
         21:1a:d5:fd:d4:af:13:75:a3:3d:fc:c0:61:d9:c2:16:07:4c:
         99:d8:6c:de:d3:0f:ff:58:1e:99:67:99:fe:d7:db:0e:2c:fc:
         a0:5d:c2:cf:a4:39:00:ae:48:70:68:f7:87:fd:59:30:9b:da:
         2f:0e:70:5f:c6:a4:97:75:f5:d8:bb:dd:29:b4:a2:5d:8a:a6:
         ca:8c:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----