Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File:                     rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier:          7iMXgXfd+h+Tf7LnLrI1Vs5MdtbaGtpX8RWmMFLZQpw=
Subject key identifier:   7B:81:2A:01:9E:75:D5:E1:FF:3C:B5:A9:C9:ED:35:63:70:E1:FC:6B
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer:       /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial:       01962E61A21BC59EDBC55EBF467ED5EA0DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number:          072F
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: AasAsfHtcIcWo9LOVy/T94WcRJQwoX9VfZoWBY1sT4E=)
                          2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a2:1b:c5:9e:db:c5:5e:bf:46:7e:d5:ea:0d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=7b812a019e75d5e1ff3cb5a9c9ed356370e1fc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:83:c1:cd:29:40:32:2e:b8:0d:02:aa:15:
                    5b:96:57:8b:51:85:1d:55:2e:74:01:b0:6b:8a:03:
                    fe:90:83:38:7a:ba:f9:89:16:ae:f5:45:b2:96:8c:
                    65:af:66:4e:6d:02:c4:be:67:99:ed:6a:8d:75:b1:
                    fe:c7:15:9e:46:63:f1:b3:29:81:a3:a7:90:6f:50:
                    fd:35:92:dc:9a:63:e8:d2:a2:0b:d4:32:56:77:31:
                    03:4d:2a:20:63:93:1a:69:11:b2:1f:7e:71:b8:5e:
                    c2:5f:cf:d9:ea:f1:28:e4:dc:e9:d4:58:f8:80:e8:
                    41:80:9d:14:13:a8:06:8e:24:74:64:28:2c:32:56:
                    f5:16:ff:a1:b7:74:65:f8:dd:46:b7:e4:0a:1f:75:
                    b5:ec:86:d8:50:bd:0d:37:3b:7f:9a:42:40:17:f7:
                    01:d5:eb:c7:5d:a3:55:0f:5e:b9:97:41:ce:66:91:
                    08:31:51:b7:4f:b6:c4:59:61:b3:ea:65:cf:04:32:
                    e2:06:c9:e3:f0:cd:29:8a:85:c3:e6:d0:e7:8e:27:
                    88:12:f6:52:57:60:23:d8:68:48:ee:2f:c0:2a:6d:
                    7c:28:bb:c4:15:54:96:db:60:8e:db:83:42:04:dd:
                    68:8a:eb:de:cd:af:2f:fa:bf:55:be:d3:66:f5:d1:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:2A:01:9E:75:D5:E1:FF:3C:B5:A9:C9:ED:35:63:70:E1:FC:6B
            X509v3 Authority Key Identifier:
                keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:48:d1:0c:5f:76:25:f9:4e:b5:0d:83:a2:3b:20:f7:72:3c:
         4e:38:17:7f:bb:ab:f5:d7:bd:8c:00:03:76:fd:e6:b5:65:bd:
         25:ff:31:f9:60:20:33:aa:e1:64:e0:1f:03:c7:be:1a:a4:6a:
         02:99:b6:b8:67:53:7b:a6:38:12:2f:93:cf:06:34:cf:5e:24:
         7b:b5:d6:e3:e7:3f:d3:e1:58:3e:3d:93:ec:d0:42:e5:3b:91:
         7d:95:6b:c0:51:95:78:dc:3f:15:9d:00:11:89:66:57:f2:68:
         48:8f:c5:cb:29:a2:ae:2f:fc:1d:d3:93:d3:20:dd:7f:92:51:
         94:96:de:57:9c:4d:df:dc:26:02:73:d1:8c:a3:92:86:5d:38:
         fe:1c:cd:fe:6c:8e:bc:4f:bb:a5:e5:6d:95:6c:0a:c5:ac:45:
         dc:b6:78:4b:95:e7:55:43:fa:d6:8f:4e:28:fb:ad:e3:8f:5b:
         74:25:53:e6:ac:8f:ef:b6:6c:ce:08:cb:09:2f:5d:a4:63:7d:
         36:28:77:5f:5b:64:fd:54:f6:5f:7b:0c:dc:63:c7:ca:71:c4:
         56:9d:70:71:5c:0f:57:18:0d:58:eb:72:40:d3:04:aa:14:0f:
         71:44:1a:5b:fa:ca:40:99:b6:22:45:f0:d0:cc:34:91:55:83:
         19:ed:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----