Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File:                     7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier:          xqAchEm2pqptqCqYlmALwhFQG4pvJbhR4zIv1mIL/0A=
Subject key identifier:   B0:23:79:3C:82:34:DB:3C:04:C8:88:5D:30:25:17:22:5A:37:50:44
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer:       /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial:       01962E6170F35B192D13705DCBA4805EF1B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number:          122D
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: 7emi4EcXXnVxZlQrcCL3QFNz8lgnYeCRmbGdPGXBzSU=)
                          2: AXJBq8yUHFkgykgslA-fSWXTVKA.roa (hash: 7rldJllcwwKofvRznEIMSA9gArb4oK2i6gZ8ozpzOqo=)
                          3: CSpNr80FvoJXN9ZfztFVeZJu2dY.roa (hash: xjwSVmlVGgcseTx9+nJV5eZL5y6c+Vbmy9OOc+sD1WA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:70:f3:5b:19:2d:13:70:5d:cb:a4:80:5e:f1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=b023793c8234db3c04c8885d302517225a375044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:a9:cc:e2:f0:7b:5f:68:23:e2:1f:1e:84:
                    cf:14:ca:f8:88:1a:1e:e8:6e:a1:5e:9e:13:bd:d8:
                    da:d0:ef:90:e7:74:52:53:0c:21:50:b6:2a:19:9f:
                    b1:1d:47:e2:58:75:4e:50:34:4a:42:b1:ab:f2:64:
                    a3:30:81:ae:ed:65:58:49:b5:2b:ac:0a:27:96:14:
                    af:52:29:c7:01:85:bf:0d:7f:ce:ac:05:26:91:0d:
                    a7:db:16:a0:45:11:b7:3a:3a:67:ab:9e:39:4b:30:
                    ba:16:be:68:7a:5e:cb:1a:42:62:e4:c6:d2:2a:d4:
                    d2:80:8d:94:58:4c:1d:aa:f1:ae:dd:ef:0e:d4:52:
                    a8:d2:00:2c:f5:fd:77:b3:f8:d0:a6:7f:15:3f:57:
                    61:74:8f:65:85:ec:ef:0a:4c:0a:f2:cf:87:ee:01:
                    48:a4:30:23:04:4a:36:2e:a9:de:f3:b9:89:47:d1:
                    b0:21:a2:46:2c:3b:b5:3f:7a:45:2a:08:7c:6d:3f:
                    78:f6:9b:74:c3:e3:f1:e8:60:b2:73:79:87:65:24:
                    89:e4:9f:53:17:f0:39:15:08:31:00:5a:22:37:73:
                    11:03:f2:ba:86:7a:0d:cd:d7:06:34:2b:65:23:33:
                    1e:22:fe:6a:de:97:99:6b:32:c8:2c:e8:e6:77:d0:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:23:79:3C:82:34:DB:3C:04:C8:88:5D:30:25:17:22:5A:37:50:44
            X509v3 Authority Key Identifier:
                keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:69:50:4f:a6:db:ef:ab:bb:f3:de:10:6f:c6:1c:cb:8c:0d:
         75:5c:99:e1:3b:3b:b7:9a:25:a7:90:7a:09:8c:e2:d9:90:96:
         3e:89:d4:4b:7a:17:fa:96:a7:a6:35:36:17:ea:81:28:91:a8:
         53:b1:78:92:1c:43:7e:34:67:ce:41:5c:f3:52:0a:fe:a4:b7:
         e3:68:40:27:69:10:8f:08:17:70:02:7a:b6:87:2e:76:f7:70:
         88:f9:96:fc:eb:14:c7:66:8c:97:cf:2b:75:f9:5e:d6:34:22:
         73:d1:69:63:17:90:7b:f5:8f:f7:77:54:9d:a6:bb:3b:0f:81:
         a0:5f:f5:5a:35:fd:72:d9:84:c6:6d:21:80:13:76:81:8f:08:
         59:6b:f7:33:61:23:85:cd:0c:f5:f0:d3:7d:c3:7d:8b:10:38:
         9e:2e:b6:5f:d5:85:f5:3a:32:4a:55:d7:7a:f1:57:f0:e5:1a:
         0f:48:70:f1:27:e6:80:22:f1:ac:21:be:ba:fd:25:e7:87:75:
         c6:3f:20:81:d0:79:d4:3e:f7:21:e0:3d:24:b2:b1:66:ae:17:
         bf:2e:39:a8:ec:07:24:c9:7f:ae:86:d7:3e:00:ba:14:5f:18:
         b9:a1:3c:25:93:28:9b:13:0e:a5:1f:ab:ae:53:ca:f4:e7:7b:
         cb:95:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----