Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File:                     inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier:          tcv1hh0nf6W4TPgKH+4z8136FUehllMeCpw3moueLFY=
Subject key identifier:   00:6F:89:7D:0E:2A:9E:8E:6E:84:57:3F:7A:A2:2A:06:AD:30:DA:FC
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer:       /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial:       01962F066384E8320DB1D883E5AAC8DAA797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: 0qjpv0EiDEHWtulURB/Qw4ZI72Kd25F/2nxtT3CP3yw=)
                          2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:63:84:e8:32:0d:b1:d8:83:e5:aa:c8:da:a7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=006f897d0e2a9e8e6e84573f7aa22a06ad30dafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:95:3a:11:ab:d7:12:aa:6c:5a:b3:96:6b:
                    ce:25:23:f8:72:0f:92:7e:65:0f:75:2c:67:d3:fa:
                    5c:c5:9e:a9:15:23:aa:eb:03:c5:ba:62:81:56:b6:
                    89:75:56:86:b2:f5:4a:d5:db:16:5e:47:f2:c0:c8:
                    a1:0e:46:9e:a7:9f:4d:94:ec:f4:30:eb:7f:52:b5:
                    9a:fd:0d:8d:9e:54:28:0c:d5:8c:dd:f5:ae:7f:67:
                    a8:78:d6:41:df:c6:74:2a:00:28:5e:2c:c5:0a:f2:
                    55:fe:60:d9:2f:82:17:76:29:45:99:e5:2e:c9:68:
                    d1:c4:d3:71:46:f4:d9:92:98:e2:b5:9f:6a:0b:67:
                    e1:37:3c:c9:72:1e:ce:64:e8:3a:66:38:67:11:5d:
                    ab:4e:75:1a:ce:dd:4c:3a:f5:df:a0:15:9e:4b:9f:
                    77:0e:b3:d8:3c:15:92:8e:40:bd:1c:74:fa:57:0c:
                    5f:d8:4b:10:6e:0b:83:bb:d2:9b:4a:d0:66:e9:67:
                    bf:73:c6:26:01:b5:2b:ac:08:64:e2:21:fa:28:74:
                    88:b7:ba:f2:fc:57:4c:b5:f8:47:51:37:5d:74:b4:
                    38:24:2d:78:4b:e2:ac:b0:7b:a9:f2:71:47:71:12:
                    d3:ca:a1:e2:5c:4f:b5:9f:97:c0:4e:c9:00:a0:e3:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:89:7D:0E:2A:9E:8E:6E:84:57:3F:7A:A2:2A:06:AD:30:DA:FC
            X509v3 Authority Key Identifier:
                keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:76:63:fd:ca:b6:e6:09:19:83:b1:9a:09:63:99:4f:2d:
         08:e5:67:54:49:2b:a4:08:87:95:1e:36:82:85:ea:b7:1d:c5:
         f9:0b:53:ae:6c:1b:02:e0:84:37:0d:b1:73:da:60:98:8a:6a:
         d0:7b:0a:55:3f:7f:5a:95:30:78:db:e7:7a:22:e0:b3:d2:ec:
         9c:f1:10:46:b8:ff:80:e6:ec:f7:7c:f1:02:7f:41:73:74:4c:
         fe:35:41:6d:52:b3:ac:2a:f6:9f:c8:1b:7b:22:9e:50:e0:80:
         79:4a:69:b5:2f:57:29:f8:0b:c0:b6:9a:93:48:1e:fd:9c:35:
         f3:ea:a1:29:04:09:71:da:33:72:3f:72:f3:f1:4c:b1:da:31:
         c7:9a:27:6b:f7:8d:68:fd:2f:2e:39:b4:23:24:dc:d7:94:fe:
         96:05:96:98:76:b9:ab:1e:2b:04:51:e9:26:61:91:81:0f:8f:
         11:29:7a:87:c2:ef:c8:09:99:24:c1:e8:95:fc:ce:dd:65:b3:
         b7:27:09:38:b9:b0:e6:95:17:50:01:f7:8f:08:14:97:97:1d:
         5a:03:c1:a1:62:57:e8:7c:5f:d2:05:07:a3:01:c2:dd:15:6e:
         38:b9:ad:d4:1f:ca:b7:7e:eb:89:c5:f7:a6:e4:2c:04:ae:a5:
         7d:71:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----