Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File:                     N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier:          kM1fgGaZLpoI6ExXmoCYwC8gKeuKLikZJIAZnyWy6VU=
Subject key identifier:   82:98:F1:47:3B:BE:AA:72:A2:20:16:12:58:52:AC:A3:42:75:6B:69
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer:       /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial:       01962F06F46B66D5A083B81507C31DB0C195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number:          0E5F
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: KXkjonV6rFzh7oKsuNciA/8QpvhDSjQgPhKrdcnUH7U=)
                          2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:6b:66:d5:a0:83:b8:15:07:c3:1d:b0:c1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=8298f1473bbeaa72a22016125852aca342756b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:b0:bf:55:a1:00:54:65:fd:44:23:0d:81:
                    09:c9:01:f3:1d:3c:4c:a6:d7:1e:07:8a:f5:b4:22:
                    27:d1:40:08:e9:f3:6c:a1:11:69:ee:46:14:16:1a:
                    09:2a:5f:93:54:fc:3b:7e:fd:5b:03:bf:6d:ec:e2:
                    c5:66:5d:79:e5:4d:4c:ed:44:35:52:f6:0a:26:07:
                    0e:5c:5d:c2:b8:0e:1f:a9:0a:81:be:78:4f:13:73:
                    8a:95:fb:bc:0c:bb:47:8f:8c:84:b3:66:b4:3f:40:
                    03:9b:2f:94:23:eb:84:42:87:ed:dd:34:51:a7:1a:
                    48:44:fd:d0:08:da:70:82:f7:3f:f2:aa:63:a9:87:
                    80:83:5b:39:b4:b7:6d:e7:9c:fa:b5:74:7c:b7:5a:
                    9a:35:fc:3a:91:9f:7a:00:f9:7e:85:f6:6e:01:d8:
                    24:91:3e:b9:66:59:fe:25:af:25:c3:d0:21:f1:f1:
                    10:d8:ca:78:03:7f:1e:2f:4b:93:69:2e:10:11:b8:
                    42:a7:91:be:63:1e:df:11:e9:96:35:f2:57:ba:2d:
                    0f:1c:cd:10:e7:fe:76:e2:57:a5:e7:de:69:43:f1:
                    13:99:6f:99:57:2a:57:93:dd:a7:0a:0c:1c:96:0a:
                    2c:c2:1e:bc:72:70:84:4c:31:ae:83:2d:2a:7f:f3:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:98:F1:47:3B:BE:AA:72:A2:20:16:12:58:52:AC:A3:42:75:6B:69
            X509v3 Authority Key Identifier:
                keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:a5:c1:79:d9:c4:33:e7:a7:3f:0e:8b:52:17:94:cb:78:
         65:bd:4d:19:0b:0e:ae:09:0d:a3:7f:53:72:bd:15:45:05:a4:
         42:74:8f:ad:29:23:00:66:56:42:11:31:97:31:f9:cb:64:54:
         65:e2:95:9a:05:b0:d1:b8:1e:0e:12:cd:7d:d2:d6:56:a1:82:
         5c:2b:e3:24:1f:6d:55:c7:b4:51:23:fa:5e:ec:80:23:d4:62:
         1a:97:82:61:41:1f:93:f2:2b:9a:aa:d2:e7:5f:52:7d:d8:58:
         68:a0:6d:3f:fa:e8:35:f2:04:19:b3:11:ca:0a:b8:29:1c:12:
         84:73:78:f4:23:ba:6b:9b:55:21:2a:f5:bd:8c:42:bb:c7:c7:
         06:8b:d6:7e:6d:59:98:b7:d6:a7:05:ba:46:5d:43:98:e7:72:
         c0:6a:66:62:41:9f:1d:09:58:c4:82:e5:80:03:ec:8e:1c:75:
         2d:19:29:a3:68:38:4a:e8:d1:68:8f:12:e5:6d:30:95:46:cd:
         bc:d7:0d:cf:7e:70:54:00:05:04:c3:fe:b0:d5:28:80:72:b0:
         d9:e9:58:68:a3:a0:40:a3:99:88:05:80:a2:fd:2d:ba:1c:bc:
         a9:43:65:ee:ff:00:37:9a:04:63:33:36:40:a1:42:dd:64:e1:
         8a:cf:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----