Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          ZgextL/UDM4XQLTcGSXbzbmevMIwz5Y7RsVtJOjBIyY=
Subject key identifier:   61:FD:15:DC:DB:9F:11:29:BE:33:16:32:4F:7C:D7:E4:FC:0B:3F:2E
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       01962F3D882C9E35360CA9E147808BE5FEBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: tVRZHSaaYzCAnc6FRbxEnUK54zgMLAJHSxfDKlqfNbE=)
                          2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:2c:9e:35:36:0c:a9:e1:47:80:8b:e5:fe:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=61fd15dcdb9f1129be3316324f7cd7e4fc0b3f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:49:fe:46:4a:31:45:c5:be:29:81:13:c2:
                    d9:45:93:8e:5e:d6:d9:ee:db:89:ab:9e:de:ac:06:
                    a6:05:9f:07:aa:94:f5:74:0e:93:5f:a1:ec:46:78:
                    54:f9:c1:82:b7:ae:da:7a:62:a6:34:90:5f:a9:8e:
                    db:e0:bd:d8:33:94:a6:36:e5:2d:d8:c9:51:7d:04:
                    9b:05:6f:9e:4f:63:b0:ca:36:c6:c4:08:75:11:f9:
                    80:b9:19:9a:5f:05:1b:19:1c:21:03:7a:74:4b:90:
                    08:37:a9:b4:e0:3c:7a:a6:98:d5:c5:90:b3:e6:85:
                    3b:45:2b:b0:d6:9e:c5:d3:dd:e9:3b:66:15:39:30:
                    c1:44:3b:28:d8:f0:97:d0:88:b5:91:c0:0a:46:be:
                    05:6b:c2:1d:dc:43:87:8a:80:1a:10:d0:3a:b0:86:
                    c9:a2:5f:26:f2:9f:03:be:93:cc:62:2b:40:a3:f5:
                    b4:86:6d:23:b4:7d:d0:fc:30:6a:ae:65:44:4f:2b:
                    03:d8:5a:c5:c6:84:ec:16:27:b8:8a:ed:0c:98:90:
                    db:f3:28:d1:cf:6a:c7:1c:a4:7b:13:1d:05:1c:92:
                    4d:5d:23:fb:75:5e:a4:09:08:53:77:81:f5:b8:6b:
                    58:ed:b5:a7:ac:94:44:be:e2:26:7f:75:a1:c7:86:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FD:15:DC:DB:9F:11:29:BE:33:16:32:4F:7C:D7:E4:FC:0B:3F:2E
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:19:2b:9d:d5:ed:69:b7:b5:96:01:85:61:c9:d1:eb:58:
         7c:cf:bb:3d:61:de:9e:6f:40:01:00:35:17:87:16:0a:08:9d:
         23:fa:a0:ce:67:cb:4c:1e:39:51:43:ba:8c:68:76:8e:e9:b2:
         19:ef:ed:3a:9f:21:db:80:05:68:d0:96:82:1f:cb:61:fc:ac:
         83:a9:cf:54:77:5d:5c:40:9f:ed:d8:6c:49:77:35:3f:66:fc:
         cd:f2:c4:f4:03:ea:6e:a0:e9:58:4a:3c:2a:b8:69:80:6c:2b:
         1e:1e:7a:ee:54:d8:dc:fe:67:38:60:22:a0:7f:e4:41:d4:f9:
         0b:67:8e:04:d1:c0:95:bd:ff:60:99:49:40:f0:33:f9:93:43:
         9d:ab:02:1c:bb:e9:7f:50:22:2d:7e:cb:4e:cb:3e:8c:87:28:
         94:6e:a5:f3:f3:b9:dd:29:b8:26:57:94:62:68:f0:38:4f:e9:
         4a:77:58:96:b2:88:c4:e0:5f:d9:65:3d:16:47:0f:1c:b8:6d:
         db:36:bb:f9:cd:c3:af:ff:66:c3:49:3d:af:60:63:2d:b9:ed:
         74:52:1d:9e:86:0f:d3:f2:12:40:44:83:a2:70:89:6e:90:f5:
         a2:8f:df:e2:db:64:4a:7d:f7:5c:26:5e:65:0c:76:9d:71:a3:
         47:09:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----