Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          uevJgJAZS1TUtuXra514mqut/MTqssJ5JdtOFeUzJ6s=
Subject key identifier:   EE:AD:60:44:35:79:F1:5C:B6:6E:33:BB:47:EF:13:FA:FC:16:03:2D
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       01962F06F4398D30E2C6F73FF6B3B34A8610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          0DEA
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: gidS6sxzCDtUdUGPGEUfGa2r8xIAmSXKxHfd/UlTDhw=)
                          2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:39:8d:30:e2:c6:f7:3f:f6:b3:b3:4a:86:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=eead60443579f15cb66e33bb47ef13fafc16032d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a4:55:6b:c0:76:55:f9:53:75:6c:17:d5:70:
                    0e:ab:d0:4f:c6:9b:e0:5f:4b:f5:a1:1a:14:ea:b9:
                    b2:5a:8e:05:8c:15:fb:04:4e:87:fd:d8:41:16:1c:
                    c3:5e:d3:e0:05:e5:b5:14:0c:1e:7f:62:fc:30:f3:
                    7c:a5:01:b3:00:81:a9:dd:28:66:dc:90:59:fd:87:
                    0b:5c:36:7b:9f:3a:44:84:16:d5:99:0c:8a:62:d2:
                    28:7c:49:2a:eb:6a:83:37:7d:ad:43:ef:d9:b8:c1:
                    8f:27:93:7b:b6:38:e0:cf:a4:f1:54:cd:e0:27:78:
                    4c:f5:da:e1:8f:8e:95:5e:eb:f5:e8:8e:92:17:83:
                    6e:eb:ca:03:59:24:15:41:a1:f4:f0:fc:c8:92:b2:
                    21:06:c8:7a:17:19:f9:31:82:05:23:1d:26:fa:66:
                    bf:d6:64:e4:98:09:d5:a1:de:5f:fb:59:09:02:5b:
                    9a:3f:ca:da:5f:15:03:2a:41:bc:ad:12:e5:1d:42:
                    5a:2e:40:65:d7:47:0a:0e:68:08:db:fb:cc:71:b7:
                    7c:d4:58:1d:69:60:01:41:24:ff:bd:e0:18:3e:f9:
                    59:de:49:e2:b7:54:39:3d:cf:99:58:8c:f1:1f:2a:
                    5f:7a:d8:b4:02:c5:31:7c:f3:1b:07:a6:83:7e:5a:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AD:60:44:35:79:F1:5C:B6:6E:33:BB:47:EF:13:FA:FC:16:03:2D
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:49:fc:5f:e9:35:84:06:90:b3:73:dc:e4:ca:b8:72:bc:d0:
         8f:68:f5:17:7b:e8:95:f8:12:8b:4d:1c:ca:6a:b2:f5:50:cb:
         4e:87:da:32:49:c0:91:ea:43:fb:b5:99:7b:36:ea:ac:08:b5:
         32:eb:ff:7c:f9:f6:0e:cf:2b:ef:c3:33:59:e1:2b:c8:e8:ea:
         6b:ce:e2:7e:b2:e5:4c:b6:2d:c7:75:43:cb:81:0b:87:8a:d3:
         ad:54:3f:2e:f0:86:2b:5d:9b:73:a0:17:8b:28:29:8d:61:38:
         c3:2b:7e:a6:4b:c8:46:87:c5:d3:51:1b:9c:d1:09:e6:17:19:
         9c:76:5f:fd:a5:ed:f8:1d:11:94:9e:c6:98:b0:32:56:1f:dc:
         8a:9b:85:34:41:3b:b4:97:bf:1e:4c:26:06:58:e0:ec:18:d3:
         55:42:5c:39:41:72:03:3f:a3:67:7c:24:5d:ec:45:b8:a0:97:
         7f:72:d8:eb:c5:ac:0b:dc:fc:b5:0d:74:11:f1:7e:b4:94:0c:
         ac:1a:e1:9e:c3:17:6c:14:0e:ef:29:8a:19:bb:19:23:96:ae:
         2a:3d:0f:d5:ef:67:24:26:fc:44:fe:1d:42:ca:46:65:d6:94:
         4d:f0:2f:15:36:2e:d1:3a:4c:34:ba:ed:af:59:0e:ea:f0:33:
         67:f0:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----