Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
File:                     wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft (raw, json)
Hash identifier:          K6SgbUIgC+gzjDJtr/dMXN86AyQqU+mI88CUd88LJxs=
Subject key identifier:   7B:2B:DD:81:C9:A9:50:F0:26:E7:1B:70:20:C5:86:92:F2:C2:86:B6
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Certificate issuer:       /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial:       01962DF3D429CE44F22F9B541741A4E8EF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: 1gW4wInA_dSwaTybzK2cECnN9GM.roa (hash: lDMswWk6x4gxqUk8wVyldaT2YU119AYZXfT2M/CJ54Y=)
                          2: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl (hash: g0nQIrdERFEzSz8nrWB/ZRlueEYGM9v3fDtdg9KSngQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d4:29:ce:44:f2:2f:9b:54:17:41:a4:e8:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=7b2bdd81c9a950f026e71b7020c58692f2c286b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:61:7a:ad:d7:57:e9:5d:b8:73:d1:39:71:
                    88:d5:b4:82:22:e9:dd:c8:3f:bd:b8:12:d9:dc:82:
                    15:da:27:53:69:34:f0:b8:a8:48:dd:a3:cb:44:f5:
                    96:35:76:d5:38:3c:e1:97:07:89:4e:c0:f5:4f:5c:
                    63:5f:ad:17:f2:a6:9d:ae:91:37:ed:fa:16:f0:bf:
                    d3:90:f2:4d:85:c7:1e:74:f2:b9:7f:21:c5:f7:5f:
                    01:7f:9d:dc:80:09:e5:d2:7d:f1:91:e6:36:1f:26:
                    82:78:d5:13:d5:cb:7b:79:c0:48:a0:91:09:74:47:
                    63:10:78:f5:9f:86:80:ec:12:e4:54:e5:3c:71:1b:
                    a3:bf:fe:ac:5a:52:ea:cc:91:bb:6e:e9:1f:af:94:
                    56:f9:c9:b1:7d:fb:24:06:6f:a3:47:cf:b0:58:ee:
                    16:b3:70:a6:68:8b:a3:f2:68:27:80:ce:81:8a:b7:
                    c4:99:a8:93:70:31:4d:f0:ab:df:2b:4d:53:52:8b:
                    14:87:9d:56:a1:3c:b8:a1:9b:f8:2d:1c:17:a5:05:
                    a1:16:c2:67:ea:4d:15:74:fd:cf:08:61:bd:28:c9:
                    ee:78:29:71:94:c7:90:a1:40:fe:52:31:6b:7f:62:
                    17:3b:8b:24:b9:f5:3e:f1:48:02:d9:d5:68:d0:bd:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2B:DD:81:C9:A9:50:F0:26:E7:1B:70:20:C5:86:92:F2:C2:86:B6
            X509v3 Authority Key Identifier:
                keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:d7:d3:92:a8:25:cf:98:56:44:4d:7f:6e:e6:6b:50:cb:
         58:c9:0a:46:01:d5:2e:78:c9:99:39:35:99:ae:76:5c:fb:73:
         32:5e:7b:17:2d:77:bc:4e:0e:ba:0c:b2:b1:07:ec:82:1c:bf:
         f9:17:21:dc:7c:65:29:c1:6f:fd:74:8b:bb:7b:db:a0:d8:89:
         34:d0:20:bd:0d:61:2a:24:3c:3a:f7:8d:8c:59:ef:19:7c:d4:
         59:21:4a:1d:3b:64:cb:bb:8a:eb:ab:e5:00:39:8a:6a:7e:c9:
         b3:03:6b:c0:03:6a:32:90:2a:03:27:68:41:a4:c5:45:5a:b6:
         a6:f5:13:c4:2d:1d:ce:32:27:13:9e:fe:7e:cc:c4:5f:f3:90:
         4a:f5:a6:b3:1e:b8:0c:85:e5:e0:81:46:7e:42:bd:11:c9:39:
         c0:92:6e:7a:29:ef:7f:db:c6:38:ce:9f:de:55:27:0b:00:0f:
         70:9d:10:95:62:4c:87:e8:11:dd:bb:e7:ff:cf:50:66:d8:07:
         0a:d6:d5:31:6a:f0:32:a8:b3:b8:a9:d4:03:b8:cc:02:3b:10:
         f8:d7:30:e7:da:08:7b:72:12:8e:7e:90:5a:7f:ae:3f:0d:1e:
         c1:ed:db:46:c6:c7:ed:65:0d:d4:b8:d3:56:c7:ab:ee:f7:ea:
         7b:eb:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----