Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          uxNq+YDE7w2pKRwUdrcI8qZaRZz95+Ce77zqMfaZHxA=
Subject key identifier:   85:DE:C2:8E:59:5B:BC:1E:F2:B0:10:D1:89:91:E0:2F:09:70:4C:59
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       01962E2B42CFC7934FB4D1CE0B083083EB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          0BAA
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: hbVyHCGCWTh+DNB206kj4sUafB9IyszQ42mBPISoteM=)
                          2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:cf:c7:93:4f:b4:d1:ce:0b:08:30:83:eb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=85dec28e595bbc1ef2b010d18991e02f09704c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:57:40:3c:e4:fb:65:47:98:dc:ea:1d:3e:
                    e7:9a:7b:d3:9b:1f:f3:18:4a:bd:88:27:28:b1:18:
                    44:0f:a3:3f:49:50:14:6d:4c:33:85:d1:e5:5a:e6:
                    b0:8e:64:44:f2:b1:87:e5:78:52:00:59:e3:a1:f2:
                    51:3d:81:42:20:7d:a4:78:42:05:d4:65:64:6d:af:
                    c5:cf:a6:2e:c5:e4:27:11:0d:bb:5d:a8:22:a1:02:
                    d9:35:ed:62:6c:ff:03:14:ef:26:57:aa:16:88:99:
                    2d:97:1f:23:06:0a:ee:be:58:46:47:3c:a2:74:8c:
                    fd:d5:5b:d4:ee:71:94:7a:71:60:5c:cf:0a:f8:2f:
                    29:e9:44:03:46:38:d3:9b:25:e0:18:05:db:9f:24:
                    5d:00:c8:e7:f6:d2:82:80:63:53:08:3f:b6:3b:6a:
                    47:e0:71:fa:a9:39:37:43:26:e8:d2:df:f7:a0:4e:
                    6e:ac:4a:f0:49:38:b6:ec:d4:42:e3:04:c0:51:8e:
                    9f:80:c7:9d:f1:fb:fc:37:93:63:5c:dc:54:81:bc:
                    7d:1f:d4:06:ac:87:a3:12:d0:50:94:49:69:f9:42:
                    b5:e8:0c:7d:a3:64:e0:90:a6:8e:ae:dd:0c:b7:cf:
                    13:fa:9d:71:87:72:ce:87:aa:4a:2c:cd:ad:e1:1b:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DE:C2:8E:59:5B:BC:1E:F2:B0:10:D1:89:91:E0:2F:09:70:4C:59
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:9e:a1:81:2e:f8:23:1f:fb:db:c0:07:04:ad:13:2b:98:
         db:95:33:26:3a:76:ce:be:18:7a:52:5f:ab:85:82:7c:06:7b:
         70:67:19:dc:8f:f5:58:03:8b:32:ac:54:3b:ca:b2:f3:31:04:
         f3:c1:64:b5:35:20:7a:f7:34:db:20:5d:39:24:fb:f3:e8:64:
         91:f6:8b:39:de:33:9f:b2:81:31:a0:9d:8c:5b:0e:3b:3c:da:
         3b:34:fb:a2:a4:5f:0b:8e:b6:73:02:59:da:e0:83:9a:39:c8:
         65:86:b1:20:5f:fa:b6:eb:71:2e:7d:b6:03:d5:f6:9c:bc:14:
         99:ac:e4:14:bb:9e:13:4d:d1:26:32:db:89:47:41:70:6b:4c:
         ad:3c:01:6f:34:da:bf:51:92:8b:38:a4:08:6c:7e:19:73:a6:
         98:0e:9d:27:fc:9f:45:7c:8b:7c:28:0e:88:36:78:13:cb:2f:
         33:1e:c5:bd:47:fb:87:a9:28:a5:fd:26:08:2f:3a:4f:a3:25:
         05:0a:e8:dd:70:45:21:42:d3:85:db:b9:5b:9e:14:93:22:70:
         c3:f4:61:b5:52:43:11:35:a9:4a:57:2a:b6:92:ea:be:78:16:
         cd:a5:0e:5d:6a:c3:19:c5:11:fe:b0:e7:2d:bc:8f:47:8f:1f:
         bd:9c:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----