Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File:                     Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier:          coYmB+lRMyXrQC6lm0QbnVF36mvW7NXFWTz28Omntg8=
Subject key identifier:   8E:9E:CE:8D:F4:42:2A:E0:31:1C:BD:66:65:F9:B4:72:D9:64:9D:0D
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       01962DF43EE487DE6F45B59E735BFB967172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: D86GWCDeRzbLc0arAdX28DzEKUnRRAyO1po3p22OU2k=)
                          2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:e4:87:de:6f:45:b5:9e:73:5b:fb:96:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=8e9ece8df4422ae0311cbd6665f9b472d9649d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:1c:d9:46:55:5d:14:a1:cb:82:2b:d1:e9:
                    55:3b:00:6b:1d:d6:1a:1a:1b:8c:34:7f:cb:e9:a1:
                    de:ff:cc:0e:3f:bf:dc:bb:d0:d1:1b:96:cd:c9:99:
                    e2:76:a0:38:84:5b:d4:7d:d2:07:25:41:8c:b4:60:
                    15:ad:52:b4:68:63:b7:de:d4:94:4a:09:26:d5:e0:
                    6f:c5:28:ed:ca:ee:e8:5e:25:ce:15:9e:99:22:a3:
                    bd:99:bd:c6:2d:51:3e:10:ad:aa:34:79:df:75:85:
                    af:0c:6a:c9:cd:6a:4e:d8:8d:59:5e:f2:dc:cd:f7:
                    ba:a3:aa:51:0d:ed:09:fb:34:92:fd:2f:45:29:af:
                    9d:ad:fd:d8:23:f3:3e:c8:46:49:82:7c:dc:7b:eb:
                    7d:31:64:bd:d2:49:10:c6:d9:a2:fe:91:57:f5:46:
                    70:8c:c4:6f:2d:e4:f5:48:b9:0a:56:14:4d:2f:8a:
                    a6:35:f5:41:bf:63:60:2c:23:dd:e6:a4:8b:7c:d4:
                    18:91:6e:89:5e:19:02:49:04:1e:9f:ef:bf:a2:02:
                    66:37:f4:8a:f6:33:5a:a4:da:0e:61:7b:83:9b:3b:
                    a4:6e:d9:91:36:bb:94:f7:fc:4c:40:52:d7:ef:84:
                    5a:75:3f:01:4a:36:c0:66:5d:eb:23:30:31:6a:3a:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:CE:8D:F4:42:2A:E0:31:1C:BD:66:65:F9:B4:72:D9:64:9D:0D
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:56:57:77:21:05:ed:ce:06:a2:17:a8:79:90:e2:5a:98:
         4a:75:28:b1:dd:ed:84:f3:86:bf:db:4a:01:64:01:24:d4:0c:
         76:90:8a:ba:5f:c2:20:34:46:a0:eb:dd:4b:68:52:96:9d:7f:
         8d:4b:2e:02:2c:6f:b2:83:79:dc:c6:67:d6:c7:71:fa:ad:a2:
         94:8c:d4:a1:79:c6:37:df:90:f4:51:b0:e8:8d:84:a2:94:91:
         0d:ba:4d:31:d5:28:58:48:e6:eb:a2:7d:c4:9e:6b:f3:60:03:
         e1:c0:66:0e:3e:c0:b0:34:ff:61:db:6e:b4:6a:a1:f8:dd:7d:
         5d:35:2e:78:33:7e:99:1e:e8:db:52:de:43:c9:2e:86:35:e9:
         39:84:9b:36:d8:0e:f8:7c:a4:e7:97:dd:ae:d8:61:0c:33:d1:
         7b:ea:f4:5b:80:23:88:68:e6:40:40:3a:7d:df:20:81:40:ff:
         1c:8e:fe:28:99:51:02:48:08:19:dd:c9:d6:d0:ae:af:4f:6a:
         72:82:24:1c:fa:5b:19:28:28:a0:b5:8a:c0:20:e4:9d:fd:6d:
         4f:06:7e:9b:ec:2c:59:00:6b:e4:44:57:b1:cf:46:d7:06:f8:
         4b:e2:06:b4:8a:95:9f:b3:e9:46:a0:ee:38:e7:64:d4:ed:1d:
         14:6f:8d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----