Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          jYbTLuVndJy5gNd6Mo/cfY7plfZATC3G1kj2Akrqhms=
Subject key identifier:   DF:75:B5:90:B0:87:63:7D:1C:43:FB:4C:C2:55:24:FC:B5:7B:1F:84
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       01962DF427DE833E06BA924E3EEB4FD1BD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: 6FmswW6Uf0CkHTycVeSPKQma81eKxByFTa33izbnIDw=)
                          2: zXjqftbJPl4WMlTVqYwCCC34rp0.roa (hash: JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:de:83:3e:06:ba:92:4e:3e:eb:4f:d1:bd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=df75b590b087637d1c43fb4cc25524fcb57b1f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:54:1c:7d:09:16:80:df:a9:58:fa:f0:90:
                    7a:0d:d8:66:5b:30:fd:1b:bd:22:5a:0e:5f:9f:4e:
                    49:e6:e3:d5:08:5e:b6:39:79:cd:2b:c7:15:96:57:
                    06:3e:0b:bc:60:2e:1e:23:29:ed:aa:32:81:49:c1:
                    a7:5e:10:b4:2e:7c:18:e9:6a:40:42:7c:7b:73:2a:
                    89:dd:f3:63:c1:ad:45:0e:82:6f:59:e2:16:cc:e7:
                    b8:44:03:22:ca:ae:35:0c:c3:58:87:3d:84:93:c8:
                    12:ef:00:f5:01:1b:d2:20:53:4c:64:67:fb:25:cb:
                    37:a0:21:1e:cf:ae:f9:29:1f:f2:a7:5c:be:d1:bf:
                    d7:8e:a3:a7:fa:6d:44:74:d0:fc:1b:12:00:38:49:
                    0d:09:27:f4:c4:50:79:e6:71:42:b5:97:7b:7a:ba:
                    40:ff:16:7b:ba:68:c5:54:1e:64:09:80:f4:66:04:
                    0b:d6:a8:ae:86:a6:68:e7:90:05:6e:44:87:c9:1f:
                    83:4c:0c:7f:42:b3:a7:f5:4b:56:0c:04:f3:f1:72:
                    ea:f5:53:81:89:f7:5a:ab:c4:78:b3:a8:81:ee:3a:
                    29:6d:e2:43:c7:8b:67:08:6e:61:f2:13:b2:a1:a7:
                    47:db:66:e8:a3:42:2b:df:34:fb:e3:40:c5:4d:4d:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:B5:90:B0:87:63:7D:1C:43:FB:4C:C2:55:24:FC:B5:7B:1F:84
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:7b:d7:91:d3:d2:bc:a0:3e:16:4a:89:98:0c:b0:b9:1e:
         98:25:15:2f:09:28:a6:66:8a:7c:15:df:6c:fd:80:9c:e7:bf:
         ae:0d:36:50:c0:c1:a2:ea:77:fa:0a:7a:b8:73:18:2c:48:d5:
         5f:7f:6a:8a:54:ac:fd:25:39:14:c8:ec:df:95:53:95:67:5a:
         19:bb:0a:64:37:9e:29:ad:f2:1b:23:e2:12:f1:da:c2:16:c9:
         fc:44:47:4e:a0:28:a1:29:cd:93:9d:0e:46:88:7b:84:0e:94:
         94:cf:00:b1:76:9b:d4:cb:4b:bd:0e:2e:b0:fe:2d:b2:a0:b2:
         90:58:96:0c:08:92:fc:be:21:ac:96:b3:5f:40:1d:a2:98:ae:
         d6:f5:37:7d:8a:02:34:14:62:3b:cc:64:4b:6f:67:19:dd:ba:
         34:2c:87:78:eb:38:b4:1d:b0:0b:8c:3a:cf:95:e4:70:4e:31:
         e9:eb:c6:21:95:61:fc:4d:2e:47:07:a6:98:4c:46:1c:97:3b:
         26:b3:9a:ed:65:97:03:84:92:ff:f1:e4:b2:55:73:d8:ed:00:
         ca:86:4d:d9:74:d5:34:34:f5:58:2b:0c:0a:20:3c:2b:ab:fd:
         af:b4:0d:e6:56:41:68:15:25:00:f5:44:4d:51:b5:23:f0:b9:
         3a:21:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----