Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File:                     esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier:          VqJYwuhXHqCOS2JYXj7H6ReBCOP8D9CHmPXY/EwPhn4=
Subject key identifier:   78:07:10:8C:0E:95:F7:9A:BA:E2:30:49:D0:C9:15:0D:9A:79:DA:C8
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer:       /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial:       01962E2AC81077CCBDAFF9717F5AE063E082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number:          C3
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: C27C6IB9b0YsMFBKM0C7CRYaHRwm9LiLznwgPt0rRvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:10:77:cc:bd:af:f9:71:7f:5a:e0:63:e0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=7807108c0e95f79abae23049d0c9150d9a79dac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:ce:8b:81:d9:61:ad:f9:36:55:2e:0e:b9:
                    bc:7e:66:5b:3c:cd:f5:63:84:97:69:b9:cf:19:64:
                    e2:fe:8b:e1:3b:cc:d6:21:5b:89:bd:19:f2:d0:55:
                    fc:3a:d7:75:29:61:ae:b9:29:42:30:bf:01:e7:54:
                    19:3d:85:af:8c:f9:ea:09:1c:b9:c8:2b:ee:d4:01:
                    45:45:f9:0b:61:8c:98:3e:2f:f5:89:05:ec:15:79:
                    d3:73:71:b7:89:f9:7f:3e:e7:42:89:46:79:2f:d6:
                    c0:4d:34:1b:5a:8a:5e:b9:76:c7:1f:01:7c:f6:6c:
                    49:32:fc:5f:bc:2d:da:53:09:3c:1e:c5:9e:9b:fa:
                    f2:12:c3:a4:8f:ce:1e:d1:81:9a:b4:9e:a2:a2:a5:
                    32:d9:39:c2:e6:ae:be:61:3b:37:03:48:71:f5:99:
                    56:63:00:f2:b6:f3:c3:fe:0f:91:e0:89:f1:3f:2b:
                    77:53:f0:99:50:5f:8b:58:69:58:3a:ea:2a:6c:37:
                    0f:f7:32:ed:47:35:7a:48:ec:c1:c4:5a:60:69:82:
                    17:a1:c8:1e:cf:cb:55:24:49:d6:64:ea:fa:db:13:
                    d8:00:26:4b:ee:70:96:d5:bb:86:17:81:7e:dc:46:
                    8b:f5:69:e8:40:99:97:bc:b7:5f:f5:31:a5:ee:49:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:10:8C:0E:95:F7:9A:BA:E2:30:49:D0:C9:15:0D:9A:79:DA:C8
            X509v3 Authority Key Identifier:
                keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:8b:b1:80:2d:4c:da:23:3f:8e:e0:79:c0:96:63:55:25:
         f9:ba:ae:47:bd:c1:d4:1d:67:b9:cf:8d:44:28:2d:20:17:6a:
         5a:ac:b6:29:47:7b:88:c3:1f:53:b1:3f:07:bd:5b:6d:90:bd:
         4f:7b:95:cd:09:e6:bf:d1:03:41:92:52:28:19:5d:d8:1c:04:
         d0:70:10:40:30:51:e7:c2:02:57:db:03:21:a4:d9:c4:73:15:
         f3:6c:48:d1:a2:9b:2a:61:ed:65:31:71:7f:c3:45:1b:17:ef:
         a8:0b:93:2c:c8:b6:f5:5b:af:eb:27:83:86:bb:a9:7c:6e:3a:
         dc:6e:3e:eb:47:73:d9:56:9a:c5:b3:de:13:b4:ca:1c:4b:2d:
         aa:44:6b:8d:b7:c6:87:bf:c5:9f:e8:b8:66:6e:01:b7:f8:ac:
         a8:a2:fa:55:93:ae:e6:e7:6a:8c:a5:ca:7e:df:01:84:e9:8a:
         8f:94:68:12:ef:04:fd:08:aa:83:55:67:7a:d3:35:c6:2a:b4:
         36:4a:69:b3:28:a4:54:1f:f8:15:60:19:1f:c5:40:1a:de:25:
         19:c7:47:d1:d9:8d:b0:ed:9d:6e:55:64:55:58:8e:84:f8:3c:
         34:98:a4:49:09:cd:2f:a8:58:d4:1e:3b:ac:11:ca:d9:ac:c4:
         36:3f:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----