Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File:                     13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier:          MYpKP442rKAKncIx/sIjiIXm5RDXFjFszYq7xaUQLPs=
Subject key identifier:   7D:6B:E2:E9:37:CD:7B:43:FE:25:8E:FB:75:AD:51:E1:13:6C:8D:FF
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer:       /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial:       01962E98A608E11CDA47EC34F835B90A90B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: +r3ulsHn5GhiIPy+bwh8gdD2wGCrcE6e1HfLhl8Wn+g=)
                          2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
                          3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:08:e1:1c:da:47:ec:34:f8:35:b9:0a:90:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=7d6be2e937cd7b43fe258efb75ad51e1136c8dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:83:73:c1:31:a6:cc:f2:31:75:65:3d:a5:
                    b2:16:07:a6:49:cc:71:4a:7e:fe:ad:60:21:ae:ef:
                    6e:bd:12:76:60:ae:6c:71:b5:14:e5:4b:95:fb:6f:
                    58:1c:9c:64:ca:56:27:6e:5c:02:02:f4:05:64:fd:
                    ea:a4:b9:7a:ff:96:c2:48:69:1d:f2:d5:56:3a:b7:
                    8c:2c:49:57:e9:d5:1a:8a:d7:80:ce:39:a9:ae:56:
                    03:34:8e:b8:ec:30:38:ca:4b:10:f8:f0:53:56:9c:
                    70:e0:3d:95:bb:34:25:eb:40:08:39:f1:3e:fd:ee:
                    3d:07:8f:45:1d:d8:96:ac:a0:90:b9:70:5f:a3:1e:
                    75:8a:85:f7:cd:aa:4f:b8:b4:65:70:54:52:80:56:
                    96:7b:50:f0:57:90:ee:9d:82:a1:aa:7a:69:1e:4e:
                    93:fa:89:66:94:4b:c3:6d:af:a8:4d:76:2d:91:40:
                    29:6f:ba:50:2d:48:9e:30:7b:b7:aa:fa:5e:8b:a8:
                    b4:aa:aa:0a:eb:87:ec:aa:32:fa:03:d3:ec:f8:01:
                    38:03:1e:c3:df:ac:ab:49:df:b3:c7:f5:ed:12:f3:
                    57:19:aa:58:db:b7:2e:97:f2:5a:41:29:e3:c6:7e:
                    9e:d8:87:00:42:67:4f:db:f3:50:c1:6f:1c:99:fb:
                    4b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:E2:E9:37:CD:7B:43:FE:25:8E:FB:75:AD:51:E1:13:6C:8D:FF
            X509v3 Authority Key Identifier:
                keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a6:ca:d0:34:8f:11:0b:8a:1a:d2:7c:f5:b5:99:31:6b:47:
         58:c7:06:de:66:ae:85:2b:b6:fb:33:c1:c4:e3:93:43:c5:13:
         ce:6b:84:41:3c:4f:66:19:3f:c9:82:89:3e:b9:c1:49:1b:11:
         ec:2b:64:73:2b:bc:8c:5c:15:59:a6:5c:a4:a9:fc:ab:ef:45:
         8c:1b:f8:01:aa:25:78:34:e8:cf:a2:ab:b3:ca:fe:a2:0c:6e:
         e4:cf:62:bc:36:40:da:55:0f:75:86:b4:42:a5:f8:dd:92:88:
         c5:21:30:4b:b7:5e:58:ae:34:da:ad:ac:ff:8d:67:a8:58:9e:
         64:d5:51:9f:86:2f:f9:dc:b8:38:dc:48:94:a8:27:14:b3:05:
         04:9d:df:bf:be:b9:f5:2f:1a:d1:df:b6:33:35:d1:f3:b1:d5:
         d6:bd:17:3d:15:38:11:5e:eb:6a:9e:c9:42:a9:88:43:36:4f:
         f0:fc:2f:58:8b:18:89:5b:0f:c2:cc:92:75:3c:5a:85:0f:ee:
         df:bc:60:53:61:70:7b:0f:1f:f4:e4:03:69:f0:ba:51:43:50:
         4a:8a:1a:6e:cf:f9:16:45:7b:f5:b1:85:8e:dc:55:88:a9:d6:
         ad:9e:f7:3d:60:e6:d5:e6:4b:9d:4d:05:e0:e8:f1:66:de:3a:
         4f:a1:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----