Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          CRsHJQ2NckEcyhCsioygBsNLJF3Vz9b/ZYfveeq3C5k=
Subject key identifier:   AC:80:88:C1:3F:C4:49:AF:22:2B:CC:A3:06:73:D2:BB:CD:B7:98:AE
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       01962F06FC7442FFB18CC1F7A1A50BCEFE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          09C9
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: p1hReX+2Nm8paZwnWR/dphr5PxNeuK1vUgfuehY+wN0=)
                          2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fc:74:42:ff:b1:8c:c1:f7:a1:a5:0b:ce:fe:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=ac8088c13fc449af222bcca30673d2bbcdb798ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:5d:f4:74:7c:5f:61:ec:78:a4:a0:3e:cf:
                    ce:2f:b7:ca:15:54:10:f7:ca:15:24:88:ab:76:4b:
                    0c:0e:79:da:86:75:f9:56:da:43:c2:14:6d:7a:91:
                    87:57:18:72:55:c2:9d:4e:b5:85:ec:63:00:e0:55:
                    5a:b1:46:4a:48:3f:21:09:59:c2:7b:03:97:bd:dd:
                    c6:66:7c:90:ff:f8:08:21:41:df:bb:e8:af:2a:94:
                    ad:19:0b:5d:f5:f2:74:ee:60:47:7f:a7:ba:76:2e:
                    72:fa:b6:bb:05:79:6a:c2:80:f7:52:50:8d:db:d1:
                    a4:05:4f:53:91:0f:14:f7:05:88:d4:8d:21:5a:a8:
                    aa:a0:f0:e5:5b:e9:05:73:36:59:2b:3d:59:9a:a0:
                    2c:39:aa:33:ca:3d:91:03:cc:79:e5:d1:46:4a:fc:
                    9f:00:5d:ac:3c:bb:b9:0a:63:26:6b:ae:f7:2d:0e:
                    31:eb:61:17:e7:03:8e:3f:0d:80:35:a2:ff:04:b8:
                    02:42:14:28:f7:e6:b5:58:33:81:60:c0:7e:7a:9f:
                    94:13:df:ac:2e:15:f6:21:0e:0c:99:71:b3:14:fe:
                    fa:ff:25:4c:70:1d:d2:44:dd:cd:60:17:27:b1:a9:
                    a7:2c:90:e8:39:94:8d:00:3a:06:8a:0d:48:da:b4:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:80:88:C1:3F:C4:49:AF:22:2B:CC:A3:06:73:D2:BB:CD:B7:98:AE
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:96:67:46:01:b5:f8:07:ff:7a:07:c0:a1:1d:f8:a1:d7:
         b4:79:a9:55:36:bf:4c:d4:f1:f2:d3:0b:bc:37:e4:cf:8c:30:
         07:25:54:57:a7:9a:fb:c8:2d:f1:a4:87:5d:a8:c3:e7:ef:7f:
         5c:a9:45:a0:4c:8a:ef:67:dc:c6:3b:7c:30:21:18:29:66:c9:
         1c:be:c5:bb:4e:d0:3e:19:cd:70:d3:53:a1:2d:c9:75:63:bc:
         45:99:a3:31:d5:01:dc:f5:8a:bb:f6:e2:f0:ff:5c:64:d1:d0:
         94:76:e2:ef:09:2a:9b:a9:60:de:55:96:bb:f8:8e:1f:fb:f2:
         31:ec:9d:cd:5d:6b:2e:81:15:9b:75:a3:2d:7b:bb:fc:98:1f:
         5f:33:ce:90:09:eb:3b:5a:61:09:23:54:0e:dd:02:ff:8c:13:
         d2:f2:98:98:fc:21:ca:d5:52:b1:7b:62:7a:ff:32:07:2a:7c:
         9a:0f:15:10:f7:fd:92:6d:91:db:d6:07:6e:3b:70:f9:a3:47:
         2d:84:09:9b:2b:53:fb:d0:b0:25:7c:86:60:5e:43:c5:f6:37:
         c0:e7:63:fb:8d:3c:c2:1f:85:8d:0c:a2:37:8b:f3:2d:c1:87:
         64:ca:26:0d:93:fd:1e:10:ac:ac:83:d8:a3:29:33:b0:dd:65:
         b0:ea:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----