Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          NUsDEHEeKlsmKUWIFylkNXL0L/LlIjbLtrUUuSnEIJk=
Subject key identifier:   28:EA:64:2B:B5:26:D9:FC:23:BD:1B:A1:17:9F:B4:E9:B8:0B:E8:A9
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       01962E2AD653931DFDBA73EF7041627A6450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: 8XIGT96AQolhsqItwnukNl0ml1d7foHnVTpwnsycDUM=)
                          2: CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa (hash: SmeUvVuEhfInXhWNJ0VU7sOK6/ghCJAsk+fSAJsrYgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:53:93:1d:fd:ba:73:ef:70:41:62:7a:64:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=28ea642bb526d9fc23bd1ba1179fb4e9b80be8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:36:17:b7:ae:c8:84:f5:0f:3c:1a:68:94:
                    ed:a2:ca:eb:33:02:b9:04:fa:b1:71:51:ec:21:89:
                    84:4a:38:54:5f:ee:38:b6:45:a7:82:cf:f0:29:ce:
                    ee:db:cd:c3:d4:cf:45:3c:ed:53:02:0c:ff:fc:47:
                    3b:60:39:f1:f4:96:5e:59:b6:93:14:17:87:8c:e6:
                    0f:a3:6d:e8:42:9d:68:36:ed:1f:5b:d8:a5:9f:68:
                    b1:f7:34:49:b6:5e:fa:d5:ff:2d:7d:77:30:39:8b:
                    a9:db:70:18:d8:9b:f9:fa:41:b5:e7:89:fc:69:d0:
                    44:b8:06:4c:5c:aa:dd:ab:c4:d6:53:7f:53:1f:c8:
                    cf:63:85:62:ce:02:5e:7f:87:93:85:ae:eb:3d:d3:
                    6b:03:49:94:18:e2:43:2d:2d:53:5a:c0:8b:e7:4e:
                    bf:7e:44:03:96:45:49:e2:c4:20:fc:4b:d8:4c:4b:
                    79:d8:06:f6:24:81:49:68:f3:93:e9:a0:53:3d:ce:
                    fb:50:a9:39:9f:ec:b0:e3:ad:1b:3d:7e:74:f4:5e:
                    80:df:52:2f:2f:98:ae:37:bb:20:dd:cc:09:a7:88:
                    3b:14:54:57:dd:5c:6b:e6:79:5a:9d:f9:22:0d:05:
                    b7:eb:b0:17:e6:52:31:48:c3:f0:3c:8a:7c:5d:3f:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:64:2B:B5:26:D9:FC:23:BD:1B:A1:17:9F:B4:E9:B8:0B:E8:A9
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:77:07:09:1a:fe:17:55:69:50:5d:35:3b:6e:a3:bc:ee:
         e7:ae:af:20:35:c3:24:d7:96:07:63:10:13:bd:26:00:28:fd:
         9a:55:64:5c:28:03:59:f7:34:82:1a:36:6a:e9:fa:40:b0:43:
         a4:6f:28:61:be:36:78:f2:9f:45:96:82:a4:9a:11:d0:8c:52:
         8c:90:53:2d:4e:96:28:62:a7:b0:3e:36:fe:c5:6b:27:00:44:
         38:fc:45:73:1c:d0:71:13:c7:ca:83:ab:ed:02:86:3d:1f:51:
         49:a4:15:67:37:bb:47:9f:be:c9:57:1d:7a:a7:39:ff:0d:c3:
         1b:80:20:90:04:9b:9b:c1:ea:52:a2:ab:8a:17:6a:94:90:58:
         79:1e:c2:75:5b:87:fa:c5:8c:f5:0d:fd:36:33:3d:44:a5:66:
         c4:ea:82:dc:e7:53:ed:a4:65:9d:dd:b8:cc:53:3c:ed:c5:17:
         dd:44:16:4b:43:d9:77:ae:3b:b6:d2:dd:db:a4:49:36:91:65:
         a7:9e:6b:d5:f9:15:77:0f:fb:1f:56:97:3d:71:09:fa:ac:77:
         ad:05:12:70:25:3d:3b:90:f8:d0:34:0b:bd:26:84:97:53:75:
         4d:08:fc:e6:e1:a8:3a:f4:62:7b:ba:33:47:f5:2a:34:bf:69:
         18:bd:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----