Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File:                     7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier:          WNQHOVw9ix0yHmRam+UnTQpIsdhMRdGUpjJjbaKm07w=
Subject key identifier:   39:F5:67:34:1B:05:94:AF:BE:6A:D1:4A:C0:3C:D2:68:3F:C9:82:80
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer:       /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial:       01962ECFA9B9DB2C1BDF9AFACEE299DFB92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number:          5F
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: 12rya0l1zqiGDsgVr3BaNVg8A1U.roa (hash: 9cXUc9FTUrRc0Qlf2tURL77aslIv0rhANBJM6PWpVX4=)
                          2: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: jjEmxU8hCMWFHrSCVOlacqHLYOIsHJvta9wwlvVOB7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a9:b9:db:2c:1b:df:9a:fa:ce:e2:99:df:b9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=39f567341b0594afbe6ad14ac03cd2683fc98280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:df:e5:f0:b1:d4:14:ec:6c:3c:86:90:55:
                    86:b2:66:f4:d8:ea:da:c4:0d:3a:50:98:b4:56:55:
                    a9:f8:75:b2:46:2d:1d:53:dd:0a:88:d6:ca:b7:06:
                    bd:6d:8f:62:10:08:7b:25:1f:91:d1:89:e8:bf:2a:
                    3a:b5:d1:e6:c6:ba:cb:11:30:65:7e:5f:ca:b9:a4:
                    e3:83:c6:0d:36:55:4d:9c:cc:47:99:1c:a1:d4:cd:
                    29:a7:f0:fb:f7:72:75:ca:96:ea:e2:c3:20:58:72:
                    10:f9:0c:1d:73:12:34:c3:f9:76:6d:74:97:21:26:
                    75:2f:5c:14:df:55:a0:52:61:4e:e9:8e:b1:22:ab:
                    07:ef:68:c0:71:65:81:39:c5:47:01:c8:54:7a:93:
                    50:17:15:a6:55:75:12:c0:53:d8:e8:63:84:97:84:
                    2a:b8:9d:05:78:e5:1e:9f:a7:a0:81:67:0f:d7:c5:
                    1a:3c:ad:d4:ce:0f:14:69:69:a5:72:19:f3:07:0f:
                    fb:fb:46:bb:94:73:4a:cf:1a:75:e7:90:0a:da:89:
                    d5:e0:f4:83:cf:81:38:18:da:a2:36:1a:f8:df:e5:
                    6e:13:57:f3:00:e5:c6:2d:66:99:40:87:47:dc:21:
                    02:2d:2b:27:a4:ff:ff:a4:c4:d5:fd:ed:de:19:25:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:67:34:1B:05:94:AF:BE:6A:D1:4A:C0:3C:D2:68:3F:C9:82:80
            X509v3 Authority Key Identifier:
                keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fe:1c:f0:41:3a:a6:31:db:13:22:67:31:8e:f3:20:8f:3a:
         6a:2d:87:db:0a:9d:79:9d:b0:d7:98:79:58:38:9c:ef:6a:fd:
         1c:5c:ed:b8:ef:63:60:38:a8:a8:37:54:a7:e5:29:08:60:70:
         d0:ed:dd:b7:a3:1b:27:49:70:66:b3:35:a5:ec:6e:a5:47:81:
         16:47:f8:14:b6:31:49:a2:c6:38:02:60:36:cf:b9:13:78:47:
         b5:f0:da:d6:ef:94:d0:58:f0:57:a9:06:bc:16:0a:7e:80:3d:
         74:48:eb:8d:6a:8e:bf:d3:7e:05:52:53:be:c6:63:72:5f:5f:
         80:df:7b:0d:e0:4d:62:66:ba:e4:c6:da:1d:64:d8:f5:f2:42:
         f5:1d:8e:17:56:a7:af:75:63:21:42:39:0d:30:d6:0e:92:1d:
         41:3d:1b:90:d4:73:12:40:22:30:2d:5a:c8:8e:46:8b:f0:a5:
         c8:1c:f9:4a:d8:56:da:40:ea:1b:16:ce:46:76:81:f4:d2:55:
         70:04:93:32:3f:5a:5b:cc:64:2f:27:8f:5a:23:c7:d8:02:aa:
         3f:8c:07:ad:7f:60:6f:1d:71:c4:d0:41:80:05:2f:32:fe:8b:
         b7:82:bb:12:55:84:57:fa:56:0a:1e:38:ce:5a:e8:4c:6b:9f:
         84:4a:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----