Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          abIK/FWJ+smKhhkdy91nFOiOOw9qFfFdeGozjZvYE+0=
Subject key identifier:   72:2A:FA:22:59:7A:80:5C:4C:A7:4F:70:E8:84:1B:2A:08:91:D5:27
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       01962F0715506F0F814A1F9C0DC9B7B6DFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
                          2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
                          3: SC1NH4BhQbqz2aYg59ahgnwQszg.roa (hash: 1mPOGFp4g8u13xFq/L3DTLiX9+I1u5tVBVqICDXDWUo=)
                          4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
                          5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: e9B/BKgKZqrSpChgIgDlHkTcjhv1GbF/rhtLfPRjipI=)
                          6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
                          7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:15:50:6f:0f:81:4a:1f:9c:0d:c9:b7:b6:df:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=722afa22597a805c4ca74f70e8841b2a0891d527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:4d:fe:33:6a:23:ae:54:61:8c:81:d1:38:
                    64:75:42:1c:2c:d7:10:33:8b:4a:07:21:32:64:7f:
                    7b:5b:6e:55:76:0b:f8:31:6b:6a:f3:b0:f8:18:10:
                    0c:ce:a8:85:68:e3:61:11:1d:59:40:ea:d5:9a:a1:
                    94:51:8b:92:70:2a:e0:a4:f9:d1:d0:e7:e6:c8:3c:
                    c7:72:e7:19:36:5e:0b:b7:f4:ac:36:5e:c7:95:1a:
                    c6:17:78:5c:b9:14:ad:ee:a6:9e:b0:c1:bb:15:e0:
                    ab:4f:87:be:b6:c9:e7:4f:61:dc:a0:21:d2:e7:cc:
                    b8:a4:96:21:c8:24:e9:e7:ab:92:d8:ab:49:f8:2c:
                    31:77:89:cf:5a:ff:a9:21:06:f1:7c:4e:3a:0d:40:
                    c4:98:cf:6f:66:49:52:84:c9:9b:d9:a7:c9:28:35:
                    79:69:fb:a8:b2:1d:40:ad:7f:13:39:9e:ea:8a:c2:
                    be:83:9a:4e:95:d6:bd:5d:7c:78:6d:b2:94:40:92:
                    9c:24:76:c0:06:d6:87:3b:ca:62:62:93:15:40:d4:
                    41:34:e1:50:58:2d:da:a6:06:0f:88:f6:ad:0f:3f:
                    79:12:26:54:f2:df:26:27:a1:b8:fc:20:00:3a:ae:
                    9b:58:8c:28:4f:18:a2:89:5f:17:57:54:56:35:59:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2A:FA:22:59:7A:80:5C:4C:A7:4F:70:E8:84:1B:2A:08:91:D5:27
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:5f:24:e3:90:dd:9d:1b:a1:ba:ad:4b:8b:24:c2:6d:5d:
         32:26:0b:93:e3:77:02:26:17:7c:3a:64:71:64:95:57:1a:f6:
         96:36:39:b7:d5:35:b5:b4:21:0a:e2:bf:41:8e:0a:d7:77:5d:
         75:d2:60:96:e8:65:7b:2e:7a:98:63:01:4e:24:29:5e:75:73:
         82:7c:6f:96:09:fa:a2:8e:fc:d1:b4:31:e4:d3:1b:f5:10:0b:
         f5:ad:42:31:97:29:2e:6a:33:12:84:1d:a6:6a:67:d7:bb:26:
         0b:e2:8b:93:7a:8c:e9:e8:29:f0:33:ae:c5:a0:39:a5:38:32:
         98:f2:54:84:94:39:96:73:f0:cf:69:ad:ab:fd:58:0d:e8:df:
         40:24:d3:d0:af:ac:9a:3a:71:f8:2d:c5:cf:86:16:b7:57:b3:
         e1:dc:5e:40:5b:b2:79:83:d6:db:de:b2:3e:16:f8:37:26:b7:
         cb:3c:83:51:01:1c:3f:20:54:61:9e:b5:4d:a1:39:c4:e4:a8:
         53:a0:cd:2f:ae:ba:91:43:0c:75:d7:39:aa:b2:d3:34:19:e7:
         4e:f7:02:c1:a4:ad:9f:0c:d2:e3:2b:a8:22:70:a1:b3:5c:b9:
         0a:29:6b:6c:f6:b6:af:48:06:b3:3b:93:d2:ee:80:a2:c6:f8:
         cd:24:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----