Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
File:                     7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json)
Hash identifier:          SMjtGr+feirS17dTnz9Ojbg958W1jGZ0h8NYZgWDcZc=
Subject key identifier:   07:D7:1E:FE:73:E6:CA:E8:83:60:46:93:2B:08:2D:3E:4E:A9:2E:77
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Certificate issuer:       /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial:       01962F068B90C2ADC0F5388027B16697662F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
Manifest number:          09E2
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: hok5gQIZ4lOWJU2Fr/rkKh0LjhWdM1K+SbPpN32Vk6w=)
                          2: YSH0QfgktL4T3PqTj2iClyuBZuc.roa (hash: otGtnOmBuu+IdPmE0dcRqAI5P+FLdodcVi6Fo/18JQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:90:c2:ad:c0:f5:38:80:27:b1:66:97:66:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=07d71efe73e6cae8836046932b082d3e4ea92e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:c7:8a:5b:5d:71:7e:a8:59:bb:54:27:3f:
                    9d:23:24:ec:6b:51:33:0f:b3:95:bc:28:e3:9a:36:
                    4a:c0:fb:21:45:f8:70:45:f8:b0:09:37:7b:f9:78:
                    c9:bf:51:1a:35:f8:60:7e:fd:b0:94:9c:1f:92:b9:
                    3d:51:1e:95:2b:c1:37:ca:bf:76:31:07:f1:cd:18:
                    e8:c5:b6:6b:52:7c:aa:fb:b2:bd:2f:1e:19:86:98:
                    6d:a9:22:51:63:13:e2:c1:94:d3:90:71:01:c1:8f:
                    6c:62:11:aa:15:24:0c:f0:7a:0c:1f:c1:a8:8d:f8:
                    6a:ca:83:0a:cb:2f:63:13:d5:f7:7f:57:09:64:77:
                    2b:56:1f:74:79:4d:de:e1:19:f7:ea:54:1b:2a:8f:
                    2d:4a:33:3b:1e:8d:de:0f:17:4f:80:dd:b4:29:67:
                    ca:74:71:7e:cf:24:30:d1:75:f8:01:f3:be:92:ab:
                    5f:45:57:d7:38:c3:06:d4:07:ff:08:74:24:f2:dc:
                    84:8a:d3:9b:70:9d:98:9d:60:b9:53:c3:fa:f2:f7:
                    cf:e4:50:1d:cb:a6:71:09:6f:96:aa:fa:79:c0:ec:
                    52:14:55:9a:bb:bb:51:6f:59:0f:a1:be:71:ac:cd:
                    17:b5:bb:21:7a:07:c6:9f:5f:24:cd:a8:eb:93:42:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D7:1E:FE:73:E6:CA:E8:83:60:46:93:2B:08:2D:3E:4E:A9:2E:77
            X509v3 Authority Key Identifier:
                keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:37:13:f2:30:26:ea:06:87:82:1a:92:a9:02:d2:89:ee:
         92:69:a0:1c:f3:4b:36:2b:61:1d:78:a8:42:7f:7c:80:db:74:
         70:18:d7:01:92:8e:e9:96:f9:9c:ac:07:9f:97:a7:c4:52:05:
         41:16:f1:db:98:06:d7:0d:9d:fd:b8:f2:88:6f:be:7b:ac:b9:
         4c:90:58:ec:3f:42:ec:00:27:d1:74:2d:09:9f:56:06:a4:4e:
         78:2a:ef:8a:73:98:58:17:c3:55:d3:4a:34:af:fe:cc:6d:a6:
         ab:d5:a2:52:9c:69:a1:a9:4f:fb:8e:1e:93:03:ee:cf:0a:54:
         da:2f:bf:45:bc:45:58:5e:72:a0:bb:a4:97:73:a3:23:7d:cb:
         e9:fc:b5:db:64:47:84:9c:bd:a5:1b:54:b1:d3:5e:4d:d2:a4:
         47:ac:7c:c5:32:c2:f9:19:ec:b4:d9:80:f1:52:aa:9f:79:32:
         f6:06:1f:d0:9c:58:9a:a9:1f:2a:f3:73:d7:67:bc:12:24:fc:
         a1:4c:b9:3a:ab:81:ed:17:f6:31:85:ee:2d:c6:4b:b8:dd:39:
         81:a1:7a:87:fd:81:d1:fc:79:19:4d:8e:b4:04:f5:79:ca:72:
         f2:e4:05:3b:3d:21:69:41:35:02:91:63:40:c5:30:a5:ac:49:
         62:89:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----