Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          kSK0csX7ETDzC1BM0uJhCP75e6paNcH0ntx4iaSelTI=
Subject key identifier:   24:2E:AC:25:4B:60:D7:E2:F1:51:AA:96:AC:4C:C8:2E:8C:40:60:DA
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       01962F3D3723723ABE9E94D7E8C03699D2A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          1277
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: D4S1+EX15cv5omZsEByItaJPgniCxsW5EWNIzxSrzo0=)
                          2: HgeaiXNp8oaIkVjkrRG17ULDd1I.roa (hash: wPu6bKujUWw8Q6Ywc1kUepdeVq7pWlsdycgmuKRoAys=)
                          3: NTo8wbiTR1K2HfWuJU9NIGO7ZNw.roa (hash: chETypjvCT3i5s+QcgGlph3xjE01ueClG2327nST8KQ=)
                          4: cM8VCwAToYUay8Cs8r_uqKsIbSU.roa (hash: 6pPF0krqdzFpgqEz+0MFM0HfAkc4fzw70yHfP6Ohc+4=)
                          5: wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa (hash: 23Nhz5S2T6oMIxU1BET30KjpLb1Pj+emx/UM9kj1sew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:23:72:3a:be:9e:94:d7:e8:c0:36:99:d2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=242eac254b60d7e2f151aa96ac4cc82e8c4060da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:2d:27:9c:8c:85:76:43:30:32:2a:be:fe:
                    c4:52:00:10:93:27:94:2e:9e:ca:7c:44:97:36:c9:
                    3a:e4:de:8a:58:b9:f8:a9:f4:85:e0:d4:71:67:d0:
                    13:6f:00:a4:40:af:3a:2a:77:ba:d6:bd:23:c2:85:
                    21:09:0b:0d:36:17:3b:c7:18:bf:e7:25:db:78:5b:
                    17:87:4c:04:d5:65:c2:2c:83:f7:cf:53:f7:11:be:
                    c9:ff:c3:d4:ec:89:92:eb:4f:a1:52:e3:0e:fe:59:
                    26:13:74:4f:3a:53:0e:56:6a:dd:54:ec:09:af:2e:
                    a9:7c:99:48:1a:2a:ad:5d:4d:44:7d:b1:69:f3:57:
                    06:ae:4e:95:79:b1:2c:73:2d:fa:05:d3:49:68:f8:
                    a1:8b:52:01:e5:1d:77:bb:12:63:ed:87:8f:fa:53:
                    de:7a:f0:89:9b:fb:ec:cf:2a:6f:66:64:27:dc:8c:
                    f6:ee:97:ba:8d:ed:34:7d:3b:ac:b5:aa:18:3d:60:
                    6c:28:b0:26:5f:32:8a:a8:b1:2b:54:93:0e:35:af:
                    ae:49:5f:44:c6:0d:97:77:fe:18:d6:3f:83:44:56:
                    52:a9:73:eb:75:b7:e0:34:0d:2c:5f:74:88:a8:5b:
                    06:0a:ad:5e:5d:88:20:55:b9:51:4d:de:5e:91:45:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2E:AC:25:4B:60:D7:E2:F1:51:AA:96:AC:4C:C8:2E:8C:40:60:DA
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ff:ba:17:eb:83:53:3c:b6:a3:22:c7:71:c9:9a:62:53:96:
         fc:9b:4c:5e:92:6b:ee:4e:07:8a:90:e4:0f:a6:74:20:01:f2:
         84:5c:29:a0:73:ab:88:0b:49:22:fd:e4:7e:8d:d1:04:f6:a7:
         3f:8f:53:17:de:eb:ec:39:33:de:b6:52:2e:48:89:3f:2a:fb:
         14:7f:ef:50:44:97:fe:69:43:db:04:f9:1e:7f:50:1f:19:1a:
         01:1e:e3:e3:2d:2c:a5:c7:1f:08:af:95:a3:55:9c:ac:a8:1f:
         de:77:c5:c0:f0:9f:e1:3d:12:e9:4d:38:fc:ac:8e:59:81:45:
         91:33:4a:90:2c:cb:af:22:9c:d4:12:51:01:10:47:e7:6a:d3:
         29:e3:78:0e:b2:24:da:e1:c9:9b:2a:93:74:23:a7:a8:6a:19:
         9c:51:a6:dd:ef:c9:3d:82:67:e0:3c:88:28:53:4b:99:59:1c:
         45:ab:89:62:13:e5:04:1b:e7:87:c1:27:b7:65:9c:b2:24:f9:
         c6:57:21:97:db:ff:33:d0:7a:02:9c:e4:99:28:2d:3d:57:a9:
         b3:9a:04:19:f9:30:d5:7c:fc:bf:85:e6:6e:1c:ed:f0:9a:06:
         d8:42:b7:ec:cf:61:ad:e6:92:85:93:c5:82:85:a4:86:1f:8f:
         d0:04:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----