Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File:                     fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier:          K4hDoLFQ+FyNymlG5aoYoF28PQe6M0TRgOMLU34i3Ns=
Subject key identifier:   8F:87:A2:83:D5:D9:B0:C6:10:32:55:B7:DE:1F:F8:D2:4E:17:FA:A2
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer:       /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial:       01962E98DF130ABF532DF551E6F586372C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number:          0C2E
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: NLjSVw4waIcy4rtGkq829acEdxT88rJVHnQ4LI0k2A0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:13:0a:bf:53:2d:f5:51:e6:f5:86:37:2c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=8f87a283d5d9b0c6103255b7de1ff8d24e17faa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:ef:4c:57:0c:d4:58:14:25:43:bc:99:47:
                    7d:0b:6e:eb:65:63:4d:c6:c3:91:a8:74:f5:0a:ac:
                    22:c3:46:0f:af:85:84:5c:62:41:ea:e7:73:28:48:
                    49:62:cd:7a:97:41:a8:1b:aa:9f:c5:33:ac:c5:2c:
                    12:15:38:66:b1:99:e5:94:90:db:aa:37:51:4f:b9:
                    73:d7:28:e0:78:d3:7b:79:74:c0:8f:be:fb:45:35:
                    13:ee:2b:43:e7:2b:53:c5:a3:b6:df:3c:04:48:e0:
                    35:8c:c8:f4:4d:7d:86:cb:6b:6a:b1:09:b0:30:e1:
                    33:6e:30:77:81:b2:b2:fe:de:80:f8:71:b2:c3:68:
                    63:84:4a:71:d1:74:18:23:a5:05:69:b5:34:a3:ee:
                    02:96:fa:70:01:05:e3:59:75:e6:7b:53:56:88:6b:
                    86:ed:ac:06:65:d8:1e:d8:b4:1c:3e:ff:09:7d:32:
                    57:e5:f1:70:64:40:e7:26:16:56:47:c3:ce:49:43:
                    90:45:41:8e:7f:c1:ef:5f:d5:fc:99:69:96:ef:39:
                    62:85:f7:77:9f:63:4b:c9:69:5c:22:dd:00:25:2d:
                    a8:bd:fd:e2:99:f7:5e:be:83:60:b5:7d:a2:54:96:
                    5f:d6:91:03:e3:f3:4c:f1:51:45:39:1e:10:b7:01:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:87:A2:83:D5:D9:B0:C6:10:32:55:B7:DE:1F:F8:D2:4E:17:FA:A2
            X509v3 Authority Key Identifier:
                keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:1d:7b:a3:5e:2f:b4:75:50:36:6d:b9:7a:16:1d:ff:e2:
         0e:67:90:4a:7c:8c:a1:29:da:23:d9:84:77:97:11:ea:61:23:
         9f:fc:ac:76:f6:c4:30:43:92:ca:9d:75:55:91:d6:a9:b1:43:
         b4:40:25:ee:b2:07:2f:45:43:8f:40:70:de:d7:04:4c:d6:3f:
         a1:d9:64:40:ac:28:3b:08:a7:18:81:9c:2c:54:d1:67:0e:43:
         87:c1:a2:54:bf:a1:80:df:3c:51:70:5a:de:15:7d:0a:ac:40:
         1f:33:17:c2:e9:74:06:89:3e:be:93:72:24:2b:5c:d2:44:80:
         86:83:9b:95:71:53:ab:a0:93:67:27:36:a5:72:98:12:61:aa:
         80:f1:6a:4d:7b:4c:13:15:02:be:3b:c1:34:f0:fe:2d:e6:6e:
         eb:bd:5f:9d:fa:1c:49:0c:ba:8e:0d:a9:f7:eb:2f:50:c9:c3:
         d1:ce:19:8c:1f:dc:c7:67:b0:59:71:c7:27:4f:fe:a1:be:9f:
         5e:3b:db:db:ec:d1:36:5c:e9:43:cc:5b:81:98:04:a9:30:24:
         91:3d:9d:30:bf:84:92:ce:77:e1:42:b3:36:ad:8a:1f:9f:8e:
         c6:41:a2:36:f8:8c:e4:a2:95:c8:b2:d8:31:5f:e4:0f:94:94:
         f5:70:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----