Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File:                     t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier:          yxMLkj7LV9BfY7bWrzrzLIb+WcP8ZyjFfpnxXOa31i8=
Subject key identifier:   F4:4C:D4:26:A7:06:D3:06:4A:25:8F:29:A0:01:5B:BF:4B:84:AC:43
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer:       /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial:       01962F06F4176081E37817CFFD1AEE7616A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number:          0DEA
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
                          2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: LgEGeBaI2W3IAwrczHyqy70ZpdSjhkvAfYb5fgY7BR4=)
                          3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f4:17:60:81:e3:78:17:cf:fd:1a:ee:76:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=f44cd426a706d3064a258f29a0015bbf4b84ac43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:41:82:c8:7f:8f:d2:2c:81:dc:9c:cb:78:
                    f0:c1:24:91:5d:24:08:a6:bb:05:59:53:8c:d1:0e:
                    9f:37:18:70:fa:e9:b5:44:98:e4:ae:0d:a7:2d:36:
                    78:db:18:c1:a1:4b:8f:c9:52:ad:61:5e:6b:85:66:
                    e8:c8:22:81:51:ca:0d:7d:51:c6:3f:e9:d3:d7:36:
                    48:bd:98:a9:68:8b:89:ef:57:2b:4c:0c:de:e0:91:
                    a2:fb:2a:58:63:75:c2:44:ec:9f:53:e1:ff:77:91:
                    1f:c8:78:18:7d:e1:54:c8:8c:ec:91:a5:dd:46:42:
                    d5:30:ab:cf:9c:fe:6c:65:9c:80:ef:4e:51:b5:8a:
                    d3:5f:54:69:a1:b4:2b:0a:f2:7d:47:e4:02:d9:fb:
                    fe:31:44:59:56:c5:33:76:ed:5e:68:9f:b2:94:6e:
                    db:52:22:8f:0f:f2:a5:7b:ec:84:1c:76:b3:01:1c:
                    f2:1e:db:03:87:d7:46:28:0e:e9:2f:4b:15:4c:8e:
                    a2:47:83:46:0d:c2:6c:8f:bf:4f:96:90:f3:71:07:
                    97:83:66:0d:2c:f1:6f:79:40:73:8d:25:ec:72:0a:
                    a6:63:80:8c:76:5d:c1:58:22:80:84:41:2b:3c:34:
                    94:cf:70:b6:3c:6f:c0:12:9f:87:12:a5:94:dc:32:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4C:D4:26:A7:06:D3:06:4A:25:8F:29:A0:01:5B:BF:4B:84:AC:43
            X509v3 Authority Key Identifier:
                keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a9:39:7b:8d:59:6a:64:ec:87:b9:46:db:2e:c8:75:e1:c0:
         81:0a:11:02:14:25:90:22:db:02:b6:39:e0:23:0d:0a:03:6c:
         fe:4f:fa:a6:be:ee:a3:a6:14:de:2c:a3:bd:16:a9:6d:84:5c:
         df:d5:b1:28:58:03:53:e3:1b:57:e7:fa:7b:f8:f5:ab:38:4f:
         35:40:4e:13:27:b9:41:22:5b:90:05:86:c0:da:5a:a3:a2:6b:
         1a:c0:5c:1d:db:66:c3:2c:09:1d:41:44:5f:a3:4d:2f:78:a0:
         a1:c5:4f:3d:6d:1a:5a:52:fd:e0:b3:5a:5c:a8:9e:6e:b3:1b:
         57:50:e5:13:dd:fa:d8:3b:f8:88:8c:5f:6f:90:2a:dc:28:76:
         0e:cc:30:56:d4:f6:71:e1:0a:ac:69:e2:92:97:b3:4a:fb:a3:
         55:10:6c:90:65:44:19:f4:f3:51:36:a9:02:ab:f8:5c:ea:f7:
         63:7c:3a:ee:bb:ab:b9:27:d7:5b:56:0e:27:0e:a2:58:98:c4:
         15:80:1b:99:3a:41:67:2b:b0:2e:0e:e0:39:85:77:c3:0b:60:
         fa:30:f4:ef:93:43:08:14:5c:b2:a9:05:6d:c1:9e:37:8d:05:
         44:54:1b:f4:a2:7e:fe:13:8a:af:18:21:86:df:8e:13:7a:eb:
         d6:70:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----