Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          M3ft+euCOfl05z/j+rMOq0P1Loo7qu9XgbQ2Zp3h4sQ=
Subject key identifier:   19:A2:C7:B0:A9:68:64:ED:36:F9:B8:A4:6E:A9:ED:31:BE:3C:AB:A0
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       01962E9916751C5FA789F07F575AC4C5A3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          03D7
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: +LOueXpKNJ04BCpxfsRPiYioK/zAp+vSH6u2fklAK08=)
                          2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:75:1c:5f:a7:89:f0:7f:57:5a:c4:c5:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=19a2c7b0a96864ed36f9b8a46ea9ed31be3caba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:37:71:75:25:d1:e0:61:46:ec:93:20:89:
                    12:f4:d7:6f:3a:7e:47:c9:69:cb:99:a5:3b:b7:69:
                    df:d7:67:20:28:38:30:55:2e:71:6d:01:6b:9f:ff:
                    0a:0a:16:27:3e:f1:7c:81:ed:03:5e:ef:9a:57:05:
                    b6:cc:90:85:6c:d7:18:dc:09:e8:c6:6c:e8:d5:ab:
                    2e:85:a6:93:11:63:88:65:bb:0f:13:06:de:af:53:
                    8e:57:3d:1d:42:3a:05:a6:7f:4f:c2:16:fc:f7:75:
                    83:db:e3:45:7b:0b:52:03:b0:45:58:b8:cc:9d:a2:
                    8a:03:cd:43:2f:22:b4:b1:7f:b1:fc:e7:50:d3:66:
                    b4:8a:61:f8:58:d9:31:76:fc:d6:7c:f5:42:d4:36:
                    e0:0b:a2:94:df:4a:3c:35:e9:f8:18:d8:05:5f:b9:
                    18:91:c5:e2:06:dd:77:a5:44:ac:53:6c:91:5c:4f:
                    7a:81:85:2c:11:c8:30:a9:ed:6c:91:70:94:ba:64:
                    d9:42:3d:58:e2:6a:8d:9b:8c:f6:83:5a:23:27:d7:
                    b4:cf:fe:f9:fc:12:2f:2c:98:32:f5:fd:dc:58:6a:
                    97:87:44:02:6d:99:42:5a:0f:91:38:36:33:2f:86:
                    39:a7:f4:cf:e8:ff:35:5c:66:68:72:a2:da:1d:c0:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:C7:B0:A9:68:64:ED:36:F9:B8:A4:6E:A9:ED:31:BE:3C:AB:A0
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:16:71:3c:90:9e:eb:3e:a7:19:5f:a8:18:58:d2:04:09:86:
         b6:e8:7e:15:01:4c:50:f2:8b:41:54:99:41:ad:bc:18:8a:28:
         b0:63:05:75:31:28:35:dc:7c:21:a4:44:38:ee:10:4e:0f:ac:
         44:e7:a4:46:0e:7f:04:04:b5:72:6e:5f:7c:5e:11:93:8b:82:
         23:e8:f7:cc:f5:58:ba:20:55:29:af:4b:0f:f4:1d:a8:b2:6c:
         ad:01:63:52:14:ba:42:61:33:50:6a:f0:88:93:96:9b:c0:4f:
         ed:e2:b2:e7:7a:bb:b9:ca:37:40:38:23:1b:c1:d6:db:32:dc:
         e6:de:35:54:22:f2:51:19:82:16:37:50:35:9c:9b:6e:95:9f:
         c9:57:2b:3e:03:69:cb:e6:d1:8a:b5:23:c0:1f:56:25:a7:4c:
         16:f0:a5:df:2f:ca:13:2b:18:a3:57:9d:01:9b:3e:51:7d:59:
         62:8d:da:c5:2d:79:b1:f6:fd:22:df:95:5b:06:9e:d0:f8:a8:
         24:87:ea:df:f4:a0:0e:d8:68:e1:7c:0d:b2:4a:84:ed:4e:f1:
         1e:f6:58:08:e1:54:a9:2d:0b:f3:a3:ac:d2:55:d5:fc:b0:8a:
         8e:ee:a5:26:5d:54:8d:99:e0:30:8c:4c:9b:e2:e3:16:7e:dd:
         6a:cc:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----