Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File:                     7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier:          H6bYfG7PGoxfPNOPJWjnEie7aevvPa9yif4RUbHxjns=
Subject key identifier:   3E:8A:B1:26:4E:ED:0E:5E:A3:FB:6C:42:8A:E9:73:68:9B:42:9A:2B
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer:       /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial:       01962E2AEDC2AA631DD81DB248ED9D3DB590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: kVC73rTMbaFFazIWHWGVowd/B9aANzkpuFEJAOR4LTQ=)
                          2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:c2:aa:63:1d:d8:1d:b2:48:ed:9d:3d:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=3e8ab1264eed0e5ea3fb6c428ae973689b429a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:fe:46:e8:af:e7:bc:6a:a4:f4:0d:4b:89:
                    e8:63:3b:99:a0:d2:58:4a:54:52:aa:d5:a6:f1:8c:
                    b7:30:56:ad:7b:ae:37:66:e7:26:52:86:80:fa:6f:
                    83:90:44:61:db:f2:da:5f:ae:b4:09:c0:7a:5d:38:
                    30:23:3c:2b:b8:a0:74:ea:5b:da:4a:ae:18:db:a4:
                    c1:18:d5:03:18:a0:f8:f0:d6:83:1c:4f:e2:ff:fb:
                    30:ba:cb:65:c5:23:42:0f:ce:e1:97:76:d9:ba:1f:
                    89:e2:bd:ab:17:33:c0:e6:44:47:02:17:d6:29:6b:
                    61:7f:4a:e2:29:7f:ff:8c:82:30:c8:a4:1e:c9:56:
                    ff:db:de:83:21:5b:4e:32:af:a1:e4:e7:50:8e:0c:
                    36:97:31:9d:a5:17:8f:2d:c1:1c:94:f1:27:71:15:
                    58:40:aa:06:c5:ea:0b:b7:e7:3f:82:ca:b2:b8:f2:
                    c1:31:a1:81:6a:c0:fe:10:6b:3e:1f:55:99:27:29:
                    42:dd:6d:c7:91:37:79:42:bd:d6:3f:ab:7a:ba:fa:
                    c3:a6:f6:f8:0e:3f:9c:af:99:19:ab:4b:ff:20:e8:
                    f2:df:d9:f9:9a:96:bb:db:8c:34:6d:e8:64:f2:a1:
                    4a:9c:4b:50:44:cc:44:36:9c:bf:d7:cf:1a:75:a8:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:B1:26:4E:ED:0E:5E:A3:FB:6C:42:8A:E9:73:68:9B:42:9A:2B
            X509v3 Authority Key Identifier:
                keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:37:c9:42:c0:88:9d:23:00:ed:13:bb:b3:57:5d:40:fa:
         f8:e6:e4:c5:03:46:89:74:9e:cd:b9:74:6c:7c:41:52:14:6b:
         63:d6:b3:e9:af:67:55:7e:18:fc:15:9f:cd:3b:4f:f8:15:c8:
         1d:df:6c:6f:9f:ab:5e:b3:59:3f:d6:93:8a:73:e7:59:70:30:
         38:ee:58:7e:f4:76:38:cb:3f:76:d1:dc:c4:7a:87:6d:5d:fc:
         01:5c:f2:8b:7f:43:57:5c:a2:5e:05:5b:c6:fe:98:51:c3:d1:
         76:bd:96:38:2d:2b:3a:cf:10:3e:10:ce:c5:1e:a3:f5:7d:0c:
         5c:3a:5b:e0:a8:a7:d0:47:4d:45:81:b6:a4:67:b3:18:ba:6d:
         7b:90:be:98:c9:e8:1b:c4:7e:4d:d5:f3:30:6f:5e:bf:27:15:
         ce:b0:34:73:1b:f1:ed:e4:e3:46:97:91:ba:ee:48:60:d2:34:
         fd:ed:f4:9e:c9:3b:09:eb:77:f5:98:35:42:40:83:f9:f7:a6:
         4c:f9:75:d4:ec:cc:df:b3:26:91:c7:69:5f:f8:a6:0f:92:a2:
         06:27:3f:5c:52:61:b8:91:09:76:d8:f5:97:db:1b:a5:5f:ff:
         c2:cc:1b:25:b3:82:b8:2d:a2:52:0d:b4:af:f3:99:13:31:68:
         3f:36:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----