Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File:                     7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier:          ysjVZ/0vU/h6zL/jygBotXLOv7lMy5BoE1FttbZq7aE=
Subject key identifier:   7E:20:31:81:51:B4:C6:B0:9D:AA:0B:21:75:DB:6D:7D:EE:0F:21:88
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer:       /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial:       01962F3D7C3AF377CEBE676763268E720ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number:          07B6
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: M+6DshltepLH9mupClO21WPG31VRrbHjaI+xomPZmRg=)
                          2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:3a:f3:77:ce:be:67:67:63:26:8e:72:0e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=7e20318151b4c6b09daa0b2175db6d7dee0f2188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:70:d4:b4:c2:a9:04:25:84:90:d1:00:9a:
                    28:a9:70:1d:4a:d8:c7:33:0b:7f:8d:21:be:be:e0:
                    d1:a7:21:61:07:68:52:12:b2:03:a7:86:80:f2:7f:
                    aa:3f:03:78:40:32:be:9c:f8:87:d5:6b:5d:e3:a6:
                    39:32:f8:1f:d4:c4:62:b3:79:cc:eb:87:e9:6a:8c:
                    0c:1e:dc:c1:d6:45:64:c9:f9:bc:9a:eb:39:ab:e3:
                    76:bf:ff:98:c2:4b:be:a3:15:74:c4:56:ee:b9:d5:
                    63:f3:3c:c9:ec:b4:fb:6a:80:e3:92:7d:20:11:78:
                    93:08:b3:4f:b8:14:50:3c:ae:54:7f:60:e2:11:75:
                    70:d8:dd:4f:81:b6:de:62:5e:17:27:8f:e4:82:06:
                    3c:ab:9e:2d:ff:5d:a6:8f:78:3a:40:af:a0:3a:69:
                    75:4d:a0:55:18:6f:05:b4:be:c0:81:43:79:36:66:
                    f6:b3:56:f6:0b:34:5a:22:2a:6c:b2:08:8f:26:88:
                    92:e9:18:08:17:7a:93:5b:9b:d8:48:41:70:ad:7a:
                    94:4c:8b:5e:5d:1e:b7:16:7b:ac:86:c2:22:a9:57:
                    88:4c:1d:84:01:17:a1:8f:5c:1f:1b:14:f3:b9:fb:
                    53:f2:31:4e:1b:f1:71:a4:e2:ee:a7:9b:af:c5:42:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:20:31:81:51:B4:C6:B0:9D:AA:0B:21:75:DB:6D:7D:EE:0F:21:88
            X509v3 Authority Key Identifier:
                keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:de:8b:a9:d1:7d:5c:ce:58:ab:c4:df:69:3b:22:e4:d4:9b:
         04:c7:a3:66:47:21:0c:ec:da:15:ec:eb:d5:fc:48:54:b2:20:
         b0:86:00:b2:25:86:95:a7:b4:45:f3:cd:64:97:ba:b8:4f:cd:
         13:a5:ab:46:6d:5e:b6:df:c3:b0:2c:c3:d0:6a:58:10:81:8b:
         66:9b:9a:e4:84:4b:94:37:37:fe:74:e1:97:d7:4b:b4:58:ca:
         1b:31:29:11:05:34:c9:8d:da:6a:85:c3:b5:8e:47:da:23:7d:
         8f:21:f9:8c:4b:ba:db:ab:07:eb:e2:a4:57:c3:62:58:ee:b1:
         25:08:13:13:7b:cf:e6:5d:5a:96:08:6a:32:c1:34:63:dd:b1:
         4b:47:43:46:9f:53:30:13:4c:6b:80:37:6a:0b:e8:3f:54:86:
         8c:04:86:b2:75:bb:36:21:6e:4a:39:db:bc:4b:1a:b9:db:e9:
         a0:18:92:f6:33:23:8d:58:fc:c2:26:a7:47:91:ee:13:8a:0d:
         bf:61:cc:e3:07:eb:3f:d9:76:f3:ab:4b:0c:7f:da:29:0b:3b:
         19:2c:1a:c8:e5:9b:34:68:9d:9b:01:1f:fb:1e:70:75:6d:35:
         41:3a:f8:a4:33:6d:cc:d3:95:41:1a:25:88:43:54:68:e2:8b:
         ec:e1:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----