Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          tWnDfELHbtlBs6UH1GCoeK+13idcqVIAptwGxQxP2/4=
Subject key identifier:   0A:66:C1:85:81:51:F6:B2:D2:94:1A:5B:72:75:7A:C2:70:E7:03:25
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       01962DF405D670BF24F24CA20EFB3D19D89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: CqTYVKlXmkZHre57qgfRMvgxUPXxar1k5Ug3Nqiw3oA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:05:d6:70:bf:24:f2:4c:a2:0e:fb:3d:19:d8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=0a66c1858151f6b2d2941a5b72757ac270e70325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:f4:a9:a0:33:ca:0c:5e:04:06:4f:09:92:
                    eb:23:ec:dc:0e:1d:8a:98:65:28:d4:6d:4c:c2:3b:
                    46:af:36:4f:8d:e1:9f:0b:21:5b:9f:ab:d5:8f:30:
                    c3:2a:3e:9d:50:ed:41:21:13:85:dd:60:41:34:67:
                    fb:ce:ff:1e:e5:02:05:58:f3:22:71:e7:59:02:b3:
                    5c:2e:f6:4d:de:5d:76:07:fa:8d:3b:93:aa:04:16:
                    38:2c:f3:2e:bb:f9:1d:95:0f:c7:d5:1c:e3:70:aa:
                    53:fa:02:97:97:85:10:ea:50:8c:0f:fe:8b:91:fc:
                    f9:21:c9:13:3d:fc:eb:cb:70:b1:cc:78:3e:ee:8a:
                    c3:d7:8d:34:ae:7d:57:3d:81:8b:f4:22:3c:5a:66:
                    33:70:25:a8:72:13:c4:cf:04:28:5a:bc:df:0e:5f:
                    33:7a:0f:09:7d:30:0b:b1:87:24:f1:25:14:22:fc:
                    e2:d0:d4:c7:10:91:31:3b:49:24:6b:dd:a6:ef:f5:
                    b7:88:78:51:ae:c3:ce:25:90:d6:59:d3:a7:c3:e4:
                    96:82:25:71:6f:fe:13:0c:91:37:d3:6b:23:84:06:
                    b8:4f:6c:07:b2:49:7f:2c:e9:11:f9:c3:0f:61:65:
                    26:c8:50:85:6b:9f:0f:60:01:35:62:a0:ca:fb:74:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:C1:85:81:51:F6:B2:D2:94:1A:5B:72:75:7A:C2:70:E7:03:25
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:2c:20:a7:77:7f:fd:1b:8a:e1:5e:51:32:2d:66:dd:7e:
         4c:b0:3e:aa:84:d3:9b:ee:34:fb:e2:b9:12:af:f8:6d:aa:1a:
         33:f6:25:59:9e:62:77:04:95:bf:f4:f8:44:7a:07:5d:69:f1:
         8f:cb:91:90:04:6f:61:f5:11:80:7e:96:8b:91:36:93:cc:4a:
         51:f2:26:3e:6a:de:0c:0e:1c:47:06:b5:bc:ce:85:fd:fe:c0:
         e8:06:02:b1:4d:d9:34:1d:04:a7:99:4d:d4:86:61:16:44:58:
         d4:35:95:67:db:dd:88:d9:58:d1:f3:36:33:06:aa:3d:19:56:
         ee:b1:b8:94:78:74:f8:c4:7f:42:de:87:a8:bc:47:da:16:6d:
         52:41:6c:1a:70:ce:87:e6:04:94:6d:40:29:a6:78:da:b3:ad:
         cd:66:f1:79:8a:6c:c1:04:c2:73:68:06:92:75:96:ed:0e:ec:
         0b:4f:bd:1d:68:d2:82:59:33:5c:84:07:58:c3:c1:81:8c:6b:
         7a:8a:fb:d9:e9:a9:06:8a:af:84:2d:db:ad:bf:8a:4c:db:45:
         06:a9:ef:f8:ca:16:c4:99:68:fb:5e:58:d5:7b:fc:c0:4c:cc:
         c8:02:41:16:fa:0f:02:b4:96:bd:ae:cf:b1:3c:29:bd:c2:8c:
         8c:1c:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----