Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
File:                     7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft (raw, json)
Hash identifier:          Y5oVRxYwnNQb/fSuv5q8ixTwjjxcq7y2tnfrNf3k0/I=
Subject key identifier:   A8:BD:CD:DB:8A:AD:96:7B:E2:6D:47:65:23:B6:98:70:A7:04:4D:14
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Certificate issuer:       /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial:       01962E98A38B2E6BE2B1C05B88AFBDFA79CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
Manifest number:          0BA3
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl (hash: 7eNUJJA+wvMzrGmzL7M496/47uJlgU4VfBjqdGZ00sU=)
                          2: W3UE20l_8Px6YA0EYO3_NVSjfaA.roa (hash: SmuzL3cKoEYF8dbOh8LZGbcugb4WzfvFlt+ZhSQ+t5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:8b:2e:6b:e2:b1:c0:5b:88:af:bd:fa:79:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=a8bdcddb8aad967be26d476523b69870a7044d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:ca:04:7d:19:01:1f:6d:f9:29:09:16:c9:
                    58:2d:5e:a0:0a:5f:53:2c:67:e0:96:1d:81:a8:c1:
                    b4:e9:52:70:c2:c1:51:f8:f4:3c:ad:13:da:12:38:
                    3c:3f:06:1d:5a:1e:14:02:b7:e0:86:3b:79:1f:b9:
                    81:a7:61:1b:e4:4e:02:6c:0b:c6:bf:8d:c5:ae:cc:
                    57:2d:1c:3d:76:f5:01:f2:8c:01:b0:b4:db:f1:2f:
                    08:80:d9:4a:d8:4f:e7:95:91:31:77:c6:8e:69:4b:
                    d0:f6:2d:d3:35:35:5b:f5:30:16:77:53:44:7a:08:
                    2f:4d:9f:d6:82:3a:3c:0d:2b:e1:71:f0:68:b1:99:
                    db:4b:d0:0b:cf:0e:00:27:e8:76:41:4f:5e:24:fd:
                    04:6c:63:4f:62:43:a3:d3:b7:41:89:05:4f:dc:ab:
                    c2:30:53:ae:7b:9e:15:db:a2:e2:78:2c:99:c0:c0:
                    1e:bb:65:8b:81:a4:c5:3a:f6:64:d8:eb:a8:83:41:
                    9a:41:dc:38:4a:c1:68:18:c6:74:c7:e1:14:2a:eb:
                    c5:3a:4d:c3:67:32:0f:7a:4b:10:f6:1a:3c:19:d1:
                    dc:8f:24:1b:98:95:20:f6:a5:f3:94:ca:ba:9e:f4:
                    3d:3a:0c:a9:7f:09:9d:99:7c:84:ae:d5:d7:18:3c:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:CD:DB:8A:AD:96:7B:E2:6D:47:65:23:B6:98:70:A7:04:4D:14
            X509v3 Authority Key Identifier:
                keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:47:92:64:77:35:05:b3:ba:3e:ef:ba:ba:a9:59:47:d8:
         6d:3c:80:dc:d6:f0:fb:9b:7e:d5:35:dc:17:51:d0:a4:43:e2:
         b4:5a:0a:10:9c:e0:5b:52:dd:ab:66:43:9a:db:e6:43:24:e0:
         c4:5e:04:95:54:91:fb:6e:8d:31:56:d8:3b:91:23:83:1b:e1:
         0f:1f:17:cd:7a:18:e1:25:6e:46:b1:85:c3:4e:54:d2:41:33:
         55:27:b5:c8:8d:c6:df:fc:81:e9:20:50:72:6b:e2:1a:b8:1e:
         68:ac:6c:53:de:73:c2:0c:ed:4b:be:7b:86:77:10:ee:4a:62:
         8e:96:a2:e0:32:ee:48:e0:cc:fb:61:61:c5:4a:9f:f4:25:4b:
         c8:23:a7:23:b6:e9:4e:59:3c:c1:b0:ca:62:4c:fb:6e:6c:a9:
         5d:db:fb:c6:8c:4f:17:fc:c7:8a:39:f2:ba:c4:c1:a6:27:b5:
         0a:85:f2:c5:e6:fb:17:d2:c5:d4:c7:2f:d3:83:17:f4:1a:3f:
         79:a2:2a:5a:b1:e5:29:d4:0f:45:ef:6e:35:b6:a3:81:a3:33:
         46:31:23:30:4f:bc:9f:38:50:a5:9f:b8:97:ed:99:84:72:a7:
         d7:24:74:5c:ab:70:ad:29:8d:1e:39:36:0f:58:95:57:16:30:
         92:6b:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----