Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File:                     7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier:          1itbaFK7x1TSwPU90JrzYCcwq+N9HV+rgpS5CjiS5oU=
Subject key identifier:   5D:6F:CC:41:6B:1B:66:C5:E3:25:BF:0D:B4:39:04:49:15:45:D5:A8
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer:       /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial:       01962E9919B002E83A31298F7B44838C44E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number:          025F
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: aUlO5DMFjsyLMjYT1vtkMikQX+UFj0sw++VYntvH+W0=)
                          2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:b0:02:e8:3a:31:29:8f:7b:44:83:8c:44:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=5d6fcc416b1b66c5e325bf0db43904491545d5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:6f:68:e4:06:ce:61:25:15:ef:d0:11:89:
                    84:c1:11:3d:d9:26:b6:dd:30:33:9e:b5:01:90:39:
                    52:d6:32:22:ae:f8:bc:99:55:8c:92:d6:d0:31:b3:
                    d8:e4:a7:d8:f0:fd:56:b7:7c:5d:d0:ac:e5:7e:29:
                    43:bd:97:3d:8e:d9:30:02:12:33:71:81:29:ad:3b:
                    a8:67:ab:11:0c:eb:48:09:f4:4e:87:c7:40:1b:3e:
                    b4:83:98:86:7e:14:9c:39:9c:66:95:3f:7e:f6:ac:
                    4a:80:81:fd:c4:23:d8:b5:a0:f3:b8:1d:1a:19:c8:
                    0a:a5:39:69:a4:b7:8d:65:1d:07:04:ba:86:ab:c9:
                    a5:07:6b:08:af:cb:0d:f2:c6:0e:2a:40:c7:c9:db:
                    45:a0:ec:71:2f:64:d1:10:3e:d2:ad:41:b2:4d:6b:
                    d9:de:5b:cf:cf:0b:3b:43:f7:ca:4f:0b:6b:ae:5c:
                    af:b5:6c:03:3a:5f:88:b2:cb:5b:48:a7:47:6d:28:
                    e9:42:f9:dc:22:05:ee:77:19:24:90:90:f1:54:b6:
                    f0:94:e0:2f:cd:76:4e:fa:64:5a:a1:0a:60:13:22:
                    30:c6:7a:2f:c3:23:91:5f:30:14:ea:79:ad:e9:6c:
                    dd:c8:c2:af:fe:ed:38:4a:f5:4d:92:13:9a:c1:94:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6F:CC:41:6B:1B:66:C5:E3:25:BF:0D:B4:39:04:49:15:45:D5:A8
            X509v3 Authority Key Identifier:
                keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:97:1e:11:c7:9e:a8:62:0c:11:b0:04:22:4c:de:cb:ab:
         22:7d:59:2f:4b:36:be:05:df:0e:f7:7b:77:4b:ed:73:4d:f6:
         5e:76:b3:e1:38:3c:01:c8:a2:fb:5d:6c:d7:38:18:33:3c:fc:
         2e:ea:f6:16:95:ca:23:b0:5f:90:41:0b:75:47:88:93:b2:a2:
         99:b7:85:f6:f6:84:63:86:2a:28:ed:06:59:28:48:ee:64:88:
         aa:78:50:a6:96:07:fa:40:67:39:f7:40:26:f1:76:d1:e6:ce:
         25:13:3c:6a:7a:44:f5:98:83:1a:cf:c4:1d:63:a3:45:be:92:
         c4:c9:a4:6c:ed:10:a2:a5:98:9c:5d:b9:37:51:d0:d1:cb:54:
         80:81:5c:ae:cd:7a:f9:c7:b8:aa:49:66:92:b6:2c:5a:6b:39:
         1a:49:56:b8:3c:01:29:59:fb:5c:4b:ac:00:52:47:1d:64:02:
         b8:0b:5e:a3:05:e4:d3:af:e1:22:e1:cf:62:00:50:52:ff:da:
         de:96:d8:65:d3:a8:85:cb:50:85:f6:fc:d1:ca:eb:a1:6b:ab:
         a2:f1:8d:01:64:11:7c:e3:cc:0e:38:b3:4d:f0:e2:1f:2d:87:
         85:92:16:ee:e7:dc:08:75:0e:d2:db:a1:c0:74:4a:c5:17:80:
         c7:9f:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----