Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File:                     7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier:          +FZ+nPdsLBHGrHNRzkIhzmmcT2OezWniO/RIE/JpNu0=
Subject key identifier:   FB:BD:89:E5:F4:E4:5F:5E:44:9E:14:C3:D2:2B:8C:DC:1C:64:74:56
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer:       /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial:       01962E991B503BFA6EFAA88CFBB4D7285B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: UyxxSbDxngqv7qHrr75msp/VoQ3fEJhlJ4maWewqQ0k=)
                          2: VOwZFJ2kzA4iWyaWmWEZLWn-AT4.roa (hash: YQUstvHHSMLfCh8uMvOZZqE+6wkkgDZ2K70GWR3RN8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:50:3b:fa:6e:fa:a8:8c:fb:b4:d7:28:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=fbbd89e5f4e45f5e449e14c3d22b8cdc1c647456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:95:42:17:64:f8:09:32:05:b4:df:8e:20:
                    53:16:f2:2f:ea:b6:9c:3a:b8:1e:e9:c9:37:5f:83:
                    89:e6:bb:d9:19:4a:0c:90:48:a6:bf:fb:fb:dc:0f:
                    fb:04:5e:d5:84:27:36:9d:b3:00:52:11:3e:f8:5a:
                    da:30:55:31:5f:e1:6d:a0:8f:ad:13:3d:e9:1c:fa:
                    62:a7:f5:94:23:91:da:61:92:16:fa:59:0a:76:b0:
                    d2:51:9b:b8:52:db:71:ec:2b:3e:41:3d:ad:fc:1f:
                    36:97:c9:f7:19:28:a0:99:d1:53:d3:13:52:bc:12:
                    b4:0f:52:0c:e3:93:10:80:08:29:35:f4:4d:41:a5:
                    fc:cb:6d:db:7e:e8:49:e8:76:b1:44:7e:ff:40:b0:
                    9d:5c:81:24:46:92:47:52:08:15:a1:dc:c5:d2:48:
                    24:3a:5c:b1:19:d4:b8:73:0b:09:95:aa:b7:df:f3:
                    af:10:c5:3e:3a:cd:ef:ed:32:c0:45:0a:7f:d7:63:
                    22:b4:5d:83:59:70:e8:d6:a2:ec:92:b4:2d:9a:19:
                    93:ea:a1:c9:2e:27:2a:ff:66:b2:53:26:96:14:5f:
                    15:49:26:b9:d8:a4:0e:16:d6:40:e0:04:5b:78:25:
                    c2:62:70:c8:60:7e:eb:79:58:77:49:ce:ea:7b:09:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BD:89:E5:F4:E4:5F:5E:44:9E:14:C3:D2:2B:8C:DC:1C:64:74:56
            X509v3 Authority Key Identifier:
                keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:6c:29:66:ca:1b:d4:61:2c:72:02:82:6b:6b:b6:d7:17:
         2a:b8:8c:f9:68:5c:92:7a:05:04:0f:a9:d3:6a:5a:f6:01:bc:
         0f:fd:69:1a:3b:d0:f0:a8:0c:f8:ee:a7:f3:5d:5c:ee:89:fb:
         63:47:2b:79:cc:41:fd:ca:c1:70:1d:2a:93:d1:04:71:ce:10:
         31:68:05:f2:b9:53:0f:77:e2:d9:04:d4:c5:c6:95:7b:67:74:
         e0:39:98:d4:fb:f9:b4:b5:a1:d0:c5:a6:ed:85:bc:02:d3:c3:
         b6:78:6c:cc:e4:37:7c:89:c6:fe:44:da:f4:f0:3f:e3:fe:68:
         02:d7:83:39:29:19:23:b4:97:1d:0b:f4:60:ae:9c:88:bf:b8:
         e8:66:ec:14:22:07:0e:53:df:8e:e5:77:2a:b0:61:2a:14:19:
         cc:6a:f9:be:6d:a8:04:a8:b4:0f:4f:d1:4f:10:db:98:ba:5a:
         ca:69:a2:f8:f8:b5:9e:e2:24:53:08:6d:52:e8:13:b3:d6:a4:
         ee:b5:7f:e3:e2:f2:76:12:c2:f2:07:fb:00:49:ce:65:82:2b:
         e2:73:f9:81:2d:bf:24:74:ee:95:22:8f:23:e0:eb:1f:f3:2b:
         e2:1b:f7:6b:17:08:6e:54:33:66:90:59:17:46:7e:1b:bc:a2:
         f7:c6:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----