Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          bfMtSU0B7MG+PFjaC7qZFIG8B5Z/VoYjk30Uqnq7HWI=
Subject key identifier:   2F:27:44:9B:50:6F:0A:E0:89:5E:EB:E1:60:DC:E8:FD:EF:C9:C2:65
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       01962E61D7E2FBBA6ABF76892DE516B23EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          015A
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
                          2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: q6dN3CBRCJ2UVQxN/OgJIpOgVPHK8T/gXLwqW1DH86I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:e2:fb:ba:6a:bf:76:89:2d:e5:16:b2:3e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=2f27449b506f0ae0895eebe160dce8fdefc9c265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:63:d9:9a:5d:e4:84:e6:eb:05:23:38:60:
                    4a:42:3c:30:60:dd:c0:5a:5e:f2:a9:2f:f6:9c:ac:
                    ae:82:fe:e8:ed:b0:a1:21:f2:37:fa:5f:20:23:ea:
                    53:81:42:de:77:53:33:b4:d0:79:7f:2d:a5:95:e0:
                    52:33:9d:64:60:10:5f:9e:82:51:d8:b3:ee:3e:ef:
                    92:93:38:0f:fe:77:e3:d5:ce:fa:87:1f:27:d5:8c:
                    a5:90:f8:0e:42:15:27:5f:01:2b:18:f1:f9:db:6a:
                    13:14:49:30:bc:2f:75:3d:6f:c0:8d:19:e9:01:4f:
                    7d:40:09:75:31:a6:70:76:4e:a6:40:33:49:fa:8d:
                    9f:c2:7b:07:9c:9e:6e:48:35:62:f9:00:b1:77:21:
                    7d:88:dc:da:38:3d:22:db:2b:d3:aa:32:92:db:41:
                    17:e1:14:a0:d0:63:7a:b7:12:b0:f8:8a:ca:3c:ec:
                    9d:ac:fb:40:f5:ec:32:0b:09:7f:86:a5:27:df:47:
                    82:ed:88:e7:ee:6f:06:b2:2f:f9:cf:d9:3c:ad:1c:
                    b1:3e:48:8e:a9:71:4a:92:c5:d3:f9:01:95:a0:ea:
                    47:be:2d:ab:f9:fe:58:1c:a9:30:75:3d:ab:c9:2d:
                    6a:29:04:b1:12:a2:7c:82:53:e3:f9:05:27:50:64:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:27:44:9B:50:6F:0A:E0:89:5E:EB:E1:60:DC:E8:FD:EF:C9:C2:65
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:8e:03:98:2f:2b:9a:e4:fb:87:d2:f1:10:0a:da:87:7d:
         58:0f:13:cb:7b:1a:da:c2:51:e3:4d:62:7b:b2:bb:f9:eb:05:
         39:19:2a:cb:3c:21:25:50:40:21:26:5e:91:e1:49:36:10:1b:
         f1:41:69:e5:68:2f:43:b0:c7:fa:4b:39:90:99:be:3a:5a:c6:
         33:10:6c:7d:13:3d:1a:fe:87:0a:30:18:b5:8e:77:80:c8:dc:
         f8:1a:9e:fc:24:97:6b:6f:33:db:eb:e6:52:ee:d6:15:bb:0d:
         ce:7f:63:f3:72:29:76:15:da:ae:89:bf:fd:7f:b8:bf:6e:b0:
         38:62:d9:e4:fe:16:c4:86:d3:70:8c:29:43:48:35:fd:62:85:
         e2:7d:0a:2a:09:c7:8a:cf:29:98:b7:32:77:7e:14:64:63:bb:
         f6:6f:3b:b6:d0:52:1c:95:54:c7:20:bc:af:22:4d:24:e8:ff:
         4e:b2:c3:53:b9:fe:2a:f2:57:39:08:f8:41:bc:1d:58:f0:56:
         97:27:d2:9d:cd:4f:c3:f2:07:cd:71:84:eb:fe:96:83:a9:90:
         e7:b0:a9:8d:60:46:4b:fc:81:b2:6e:f8:f6:cb:eb:53:8c:33:
         a1:77:67:0c:89:97:62:dd:8f:b9:3c:f2:15:94:ab:92:2b:09:
         9a:e2:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----