Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File:                     cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier:          8SXwe/bZ5ixR6IVRnAUdT/C/HZ84aZy+ljyDxeNIl1w=
Subject key identifier:   AF:26:B6:23:E9:72:4C:7A:52:D2:0E:C4:19:37:F9:F9:1C:3E:35:6D
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer:       /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial:       01962FAB917FA82EAC646E8B1ECDB059FFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number:          0D71
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
                          2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: 1BIylmPfNavdDmDsxQIjBeMiMPHxXFaNTVP6OOxN3vI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:91:7f:a8:2e:ac:64:6e:8b:1e:cd:b0:59:ff:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=af26b623e9724c7a52d20ec41937f9f91c3e356d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:9d:05:8c:b9:e7:14:6f:73:e7:1a:ed:cc:
                    ed:e5:ec:5e:ad:7c:d5:ab:3c:98:9d:e6:da:09:78:
                    df:f8:94:00:2c:0f:e6:f9:3b:ed:bd:44:4e:26:27:
                    48:37:51:fd:47:13:a8:52:ba:58:13:f0:57:70:2b:
                    55:69:65:a1:bc:3c:7e:f8:a7:65:79:2b:ae:28:c3:
                    24:7d:85:95:51:d0:e3:af:ef:1e:6f:23:69:f1:a5:
                    f7:51:68:ba:03:c5:59:f9:3e:9c:72:be:99:43:29:
                    e7:c3:c6:3f:8b:7d:2b:d6:1a:fe:b8:a7:68:6c:c1:
                    8e:fd:c9:d4:b0:9b:a5:fd:1e:e1:71:a3:c8:d6:c4:
                    6a:de:d9:6f:f4:e6:b4:93:45:21:0a:fc:03:67:81:
                    39:ee:a8:16:be:23:fe:c8:db:8a:18:45:89:9d:e6:
                    66:2b:d9:c2:ea:ac:d3:0c:5f:52:92:de:45:05:5c:
                    d4:c9:1e:10:7c:1d:fb:f7:97:d3:ba:3d:42:80:ad:
                    47:41:88:45:6c:c1:f3:d1:d6:fd:e3:7c:ba:48:12:
                    7f:0e:fe:2d:49:03:20:11:98:71:49:a9:99:f7:33:
                    b4:1e:78:41:e7:68:e7:d3:c5:f5:ee:36:34:a2:8c:
                    ac:d3:3d:2b:d4:77:82:14:4b:ad:d5:4c:c2:dc:2e:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:B6:23:E9:72:4C:7A:52:D2:0E:C4:19:37:F9:F9:1C:3E:35:6D
            X509v3 Authority Key Identifier:
                keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:be:b8:ff:c9:39:89:84:52:6a:36:5a:24:90:a6:3d:f0:
         aa:5e:bf:b1:e4:b6:a3:05:26:b4:1d:ee:d3:39:27:30:ab:29:
         02:47:4d:f3:c3:73:29:19:c5:d9:10:c8:16:42:ba:bb:b3:c6:
         77:37:c9:d1:65:b5:dc:d5:ad:42:69:34:6a:b2:5e:09:4c:97:
         76:48:5a:c9:70:9e:9b:41:35:c3:76:05:e6:6e:fb:b0:3b:ae:
         c2:16:68:9e:96:51:b7:2a:d6:2c:34:52:ae:b1:6a:08:ee:c5:
         04:5c:8a:71:e1:22:4f:d3:4a:e5:1d:be:7f:c9:6a:ee:a0:53:
         0d:25:ba:ec:bc:6d:3c:73:57:14:2e:b1:e2:6d:74:8b:ac:5b:
         a7:2a:3c:74:fc:40:00:64:62:11:63:1b:74:11:76:7c:cb:b0:
         8d:e2:7c:75:cf:11:27:5f:33:6b:1d:89:13:d5:89:80:1f:b1:
         d1:9e:56:96:8d:bf:ae:6c:09:17:9b:35:4d:ac:86:91:c9:bc:
         47:1a:15:85:bb:2f:a7:f7:28:ae:43:b2:cb:dd:70:f8:44:16:
         0d:fc:45:b3:1a:84:3d:a2:f0:09:3b:2a:d9:9d:7e:fb:54:ca:
         8d:90:a4:40:bf:cb:55:13:19:da:da:23:5d:10:ef:d2:ba:ac:
         db:4e:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----