Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File:                     fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier:          7KPRmKfRPipNot0n0V9aP8a5R80Q+4lAjhll28wKg6s=
Subject key identifier:   D7:F3:20:5F:C0:8F:FC:19:D2:BA:23:FB:FD:95:54:99:C7:05:42:C7
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer:       /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial:       01962E61B0EAF6756DEB0603A27F092DB83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number:          0CEF
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
                          2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: bzmyLeeX8rI4PsijshrlQb5G+DAizgEi7kA/uEW1mNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:ea:f6:75:6d:eb:06:03:a2:7f:09:2d:b8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=d7f3205fc08ffc19d2ba23fbfd955499c70542c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:b9:f1:30:d2:20:f4:e8:12:30:64:22:1f:
                    36:cb:10:36:19:7e:eb:01:6e:fa:ba:51:09:76:76:
                    1f:01:d7:f2:93:7a:4a:a0:4b:f2:e3:9d:3c:d9:b0:
                    44:95:f5:6b:8e:53:a3:6e:cf:b8:b0:4a:b3:0a:27:
                    c6:f8:1f:17:8d:c1:b6:48:c7:09:96:32:d9:4d:f6:
                    7b:9e:48:00:9b:11:c4:4b:6a:59:ff:73:89:0a:9f:
                    95:47:77:61:77:fb:49:91:51:a6:3c:33:9b:98:58:
                    82:5a:8e:9a:18:73:01:4e:19:28:b6:0c:d3:ef:b0:
                    22:83:72:98:36:b3:77:e0:c3:9e:ec:48:05:f6:18:
                    eb:79:37:7d:68:60:d7:b8:0a:19:bc:fc:e3:ef:c2:
                    71:bd:83:62:e0:56:50:fc:4e:cd:30:c5:bf:d7:6e:
                    a3:3e:d0:1d:ba:60:38:e1:93:0f:57:58:6b:df:7c:
                    30:35:e4:ff:05:39:39:a9:4f:2f:4a:54:a6:20:78:
                    97:be:b3:f5:24:ad:73:a9:c8:9b:15:60:2b:6a:16:
                    1d:57:61:09:ce:cc:0b:58:69:a4:0d:4c:0d:7e:81:
                    2b:55:5d:ad:db:9c:28:9e:50:bb:4d:26:c9:ab:ab:
                    7a:6e:b5:ee:38:5d:f7:ab:40:3f:f9:ce:2e:98:69:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F3:20:5F:C0:8F:FC:19:D2:BA:23:FB:FD:95:54:99:C7:05:42:C7
            X509v3 Authority Key Identifier:
                keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:1b:3f:a5:4f:6d:a8:db:b5:4e:c2:6b:b7:26:ef:c8:83:
         c3:db:18:4d:48:a7:4b:f9:95:ea:f6:ab:f2:78:e4:2e:8d:a3:
         86:06:53:48:d0:5a:e1:cc:aa:cd:a0:b8:19:d4:cb:92:4f:81:
         b0:00:d7:71:69:51:d8:f4:1e:a9:2b:83:18:fa:18:e1:32:03:
         f5:d1:a7:51:30:b9:fa:7a:c4:b9:34:a8:c0:4f:de:02:c4:b1:
         4d:09:ec:67:5f:53:2b:fb:0c:a0:3f:02:c0:4d:3e:ef:59:ed:
         e5:73:f4:35:63:95:ad:d3:88:f1:13:f1:fa:1c:29:56:44:62:
         02:36:52:75:31:a9:c0:ec:7c:c9:22:86:79:43:d8:20:02:3a:
         ed:fd:d9:a9:34:79:8d:29:9d:8b:aa:37:8d:36:2b:3c:ad:d4:
         0d:96:69:78:eb:5b:42:7f:66:ae:d4:e9:ce:dc:c4:14:11:4a:
         7b:03:ac:08:5c:06:76:0b:1e:d6:3d:f5:01:49:9b:ec:06:96:
         13:14:e6:1b:45:b4:37:39:57:8b:cb:a6:45:2b:4d:62:31:f8:
         97:aa:16:e6:8a:20:f0:e6:21:10:4c:54:56:71:82:fc:c4:cf:
         1d:0f:1e:5b:4d:dc:f0:7b:d8:10:89:5f:cc:24:30:14:9e:5c:
         f4:51:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----