Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File:                     xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier:          b2JuV9IKTIbKnrQFNtK4MnzddS8VetGqW2DicPZ+n7Q=
Subject key identifier:   0B:2A:EC:39:6E:81:09:9C:F9:73:A4:08:FD:C7:6B:A7:B0:F6:9F:4C
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer:       /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial:       01962DF3B5945229A857461594B1A4812266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number:          04D6
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
                          2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: Yj53dWf9R80F/90HTNQRltAA7jRR7q6Vzb8Q9aIF3K0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b5:94:52:29:a8:57:46:15:94:b1:a4:81:22:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=0b2aec396e81099cf973a408fdc76ba7b0f69f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:f6:3c:a8:5c:01:81:d6:33:d0:7b:57:48:
                    07:f9:2d:f6:bb:8f:ad:7d:b2:fc:a3:bd:3c:d4:7c:
                    b7:b3:5d:9b:f5:a2:63:3b:76:56:31:71:7a:4d:b2:
                    4c:a5:66:bb:50:01:d3:58:89:6e:c6:99:fd:14:f2:
                    c4:48:82:ec:72:72:a3:fb:e5:ca:89:ef:b8:70:7b:
                    21:85:1a:c0:20:1c:02:3f:e8:fc:b1:eb:1a:a2:5b:
                    04:39:08:4c:af:96:51:be:83:45:74:12:98:36:d4:
                    b0:e9:f7:ae:3b:f7:8e:1b:7d:ec:26:61:30:19:19:
                    99:e4:11:82:1c:2c:e7:79:50:9f:74:a1:d0:cb:b5:
                    96:68:4b:87:3c:fb:d9:92:41:21:d5:da:ef:e7:ca:
                    c1:c0:fb:1d:62:52:b2:85:f6:16:57:5a:74:6b:a5:
                    5e:2c:54:ef:ad:8e:62:90:d0:8e:cc:81:de:45:6c:
                    63:74:53:54:69:6f:2c:69:d0:be:64:5a:b0:4b:13:
                    10:3c:9a:7c:02:fa:d3:27:d2:25:8c:b4:0c:dd:97:
                    e3:b1:37:fd:25:ac:b0:69:c0:20:27:21:9c:10:fb:
                    7a:9e:f5:0c:43:b7:d8:a7:c5:6e:4c:84:47:13:43:
                    5c:05:ab:26:c1:75:62:c3:78:74:53:eb:10:e4:7c:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:EC:39:6E:81:09:9C:F9:73:A4:08:FD:C7:6B:A7:B0:F6:9F:4C
            X509v3 Authority Key Identifier:
                keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:42:9b:0a:46:f6:06:4e:f9:b6:2e:89:d3:a4:ba:0f:c3:
         fe:83:17:cf:28:7c:a4:40:19:78:08:94:aa:4e:41:ec:4f:c0:
         2d:62:60:51:7a:3c:e9:82:8b:8b:fb:65:3b:e6:c6:55:5d:13:
         b3:ba:93:f4:de:cf:5e:24:21:4b:92:00:c8:08:b0:e5:2f:d0:
         34:6c:a9:86:5b:f5:4b:03:2c:04:d0:6b:fa:ff:6f:9a:64:14:
         3a:e2:aa:96:89:4e:d8:e1:aa:2a:17:5a:07:c7:da:7d:5f:ee:
         a0:cc:3c:18:a3:71:66:13:47:b0:a4:ee:f2:79:96:51:af:8c:
         7e:2f:7c:7d:fa:bf:f9:3a:20:1b:e1:51:89:65:63:7c:74:b8:
         ad:ee:52:85:93:1b:3e:d0:1a:28:71:b1:96:a2:e9:2f:96:41:
         87:09:8c:c1:f3:57:9a:22:bd:c0:76:2c:e4:50:73:58:9e:06:
         17:3d:0a:8a:49:77:a1:47:29:35:01:4b:17:ca:a3:76:f1:98:
         58:9c:33:5c:83:b3:b2:1f:59:5f:78:a1:74:97:ea:6c:86:63:
         7b:07:04:15:66:61:98:17:2a:99:d6:81:47:aa:70:a6:60:4b:
         f6:0d:ae:6f:e1:7b:8b:5d:73:e3:42:5d:63:95:30:ed:b6:83:
         c8:46:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----