Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File:                     Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier:          7JPwc1PfPj1Vdjc9z1fpduxEqfuma1QVf23rKi24zws=
Subject key identifier:   22:E3:72:72:16:88:F9:B4:74:D4:1F:F7:02:70:F6:DA:34:FE:4E:75
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer:       /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial:       01962F06CB506B7F758E6EBAAD306374C673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
                          2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: 461HvfFziB65wjme4LApdS+PYh+3qgwJXzXkxlSe8wI=)
                          3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cb:50:6b:7f:75:8e:6e:ba:ad:30:63:74:c6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=22e372721688f9b474d41ff70270f6da34fe4e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:02:fb:d8:ff:ba:7a:01:30:b9:35:72:e2:
                    6d:7c:19:cb:ce:ba:67:79:35:29:c6:4b:ea:ca:f1:
                    4d:45:24:e1:8d:48:0b:79:a3:95:f3:8d:25:ad:e0:
                    f8:ed:28:5d:a2:10:e2:b2:a4:ca:51:b0:46:ad:7b:
                    34:91:9e:c1:b9:57:9e:bf:45:b0:9c:c9:e2:db:2c:
                    35:49:d3:6b:11:40:33:51:04:56:2e:d4:c0:aa:d7:
                    14:0c:ac:73:5d:c3:54:86:48:8d:97:e6:38:20:7c:
                    eb:fe:44:77:1c:7a:95:e0:ea:f9:1e:e3:25:58:3b:
                    a6:0f:30:9c:a7:f9:c2:a5:ba:64:97:2f:30:91:4b:
                    57:1b:60:ef:09:68:d0:d2:66:7d:5a:a6:09:4f:11:
                    4b:ed:1f:16:ef:01:e2:d5:7d:4c:94:bd:56:ce:c8:
                    fd:5d:8c:8a:2d:2e:ae:75:ed:ac:90:cb:73:72:1d:
                    ad:a2:3d:14:21:70:e7:e7:98:b8:f7:f3:bf:eb:56:
                    ac:21:87:70:90:a0:84:16:f4:cd:7a:b8:4d:52:5a:
                    a9:a8:5c:27:ef:97:75:5d:a0:47:e1:87:0e:ae:24:
                    0c:20:d9:7c:6c:d9:44:5b:f7:57:f9:51:ee:fc:18:
                    38:11:90:4b:b8:c3:13:6e:e3:cb:2a:c5:0f:85:27:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:72:72:16:88:F9:B4:74:D4:1F:F7:02:70:F6:DA:34:FE:4E:75
            X509v3 Authority Key Identifier:
                keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:c1:62:50:d1:72:09:13:ee:a8:66:51:0a:5e:1e:18:a2:
         66:8c:62:cf:f0:d2:aa:2b:44:71:9d:89:eb:2c:18:bb:7d:b2:
         53:53:d8:c9:49:90:af:d4:5e:58:cf:5b:ba:32:14:3a:ab:06:
         ca:ed:20:a3:f2:ed:2d:bf:61:20:49:ba:b5:55:0d:26:55:2e:
         9d:31:ba:af:c5:55:5a:82:df:d7:97:bf:85:51:75:ae:da:7c:
         ec:74:fa:75:41:8f:ef:e0:ab:b2:61:a0:32:d0:d0:b9:91:b1:
         57:4f:f1:62:d9:5d:4d:d0:5c:5c:1e:24:ce:b1:75:d2:bc:94:
         bd:91:67:2f:02:96:c2:98:da:fc:63:3d:53:44:56:75:2e:28:
         73:46:49:1d:e8:60:aa:e1:e2:01:c3:c4:fe:76:97:91:06:7e:
         89:c7:b3:29:e7:b9:bb:56:3a:89:5a:1a:16:84:26:a8:53:34:
         fc:18:e6:1e:48:38:de:24:ff:89:0e:ec:ad:d7:cd:99:97:b1:
         dd:88:e7:75:54:bf:a6:f4:0e:6b:f3:70:a2:f3:4b:1c:a8:58:
         1b:27:0c:c8:58:bb:20:7d:6d:79:dd:2b:cd:ad:9b:e2:ce:d2:
         29:61:ec:8c:b9:f6:bf:06:11:22:0b:6e:7e:a2:ea:88:58:af:
         05:f0:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----