Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File:                     7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier:          NyV3SM9PbMMqacre6H7ykmmJJ6D8TDAj/ZYWsEWc8oc=
Subject key identifier:   98:76:04:D8:85:23:D9:FA:2D:1D:FD:8B:25:41:9E:B7:55:D0:2D:F2
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       01962E61D22DE3EB3590F5A015527A3C5AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
                          2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
                          3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: a2xvI73kvo4Ag5u/7qJsYv51F6zEGdRTu7Qd+eMFvok=)
                          4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
                          5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
                          6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
                          7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
                          8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d2:2d:e3:eb:35:90:f5:a0:15:52:7a:3c:5a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=987604d88523d9fa2d1dfd8b25419eb755d02df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:ec:b1:72:4f:5a:bc:3e:7b:63:fd:64:71:
                    1e:a9:9b:31:8b:af:37:9d:87:2f:da:64:12:20:99:
                    5d:0e:c5:50:87:61:54:2a:66:b0:42:65:2d:b0:9b:
                    12:4c:63:86:72:4f:f4:1e:19:b1:cc:ae:d3:96:41:
                    c5:e2:f7:46:70:83:fa:9b:b3:fc:82:e0:24:58:f4:
                    13:12:19:7d:d6:96:c1:32:ff:34:55:bf:f2:f8:37:
                    db:4f:fa:b3:58:eb:ec:c4:df:6c:67:aa:83:f5:21:
                    22:a7:f1:e9:a5:1c:24:d3:97:08:e4:7d:a2:a7:9e:
                    b5:28:76:fe:a3:ba:5f:ba:cf:a4:bb:53:17:12:7c:
                    66:81:95:8d:89:b4:0f:4c:6a:95:50:c7:66:36:bb:
                    f2:f3:aa:93:dd:59:bc:66:3e:ce:9a:61:33:17:fd:
                    61:33:c2:87:7b:e5:70:7c:b5:3e:50:b1:91:4f:e0:
                    4e:4c:38:ef:fe:80:ac:4e:2a:38:e7:74:ce:01:cd:
                    a1:74:a7:ea:d8:31:25:3e:70:60:29:ef:65:cb:e8:
                    4d:36:11:2a:7b:29:62:31:92:af:6e:72:af:78:7e:
                    8b:78:aa:45:7f:1f:7e:d0:62:67:6d:90:de:d1:62:
                    45:21:dd:17:36:e5:32:9f:ac:a2:a8:b9:f2:9b:09:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:76:04:D8:85:23:D9:FA:2D:1D:FD:8B:25:41:9E:B7:55:D0:2D:F2
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:b2:86:4f:95:ff:f9:60:dd:c1:ec:b6:a2:88:98:00:15:
         22:ff:ed:28:18:0e:8b:ce:55:ac:74:94:54:3f:39:cc:43:ad:
         13:f1:b0:53:4b:f0:31:65:d1:27:bd:a5:2f:ae:43:92:31:0d:
         12:e9:aa:22:54:66:fa:a6:b8:7a:89:27:07:d4:62:cf:29:62:
         ae:62:d3:74:f2:13:f9:69:b7:c2:36:8e:22:eb:73:61:92:e8:
         d9:6a:07:0a:a3:45:6f:75:c1:74:15:5d:c0:bd:e4:ff:da:13:
         73:f9:bf:0d:fb:74:26:34:80:7f:66:d8:00:c0:36:ff:08:52:
         ac:fe:5a:38:0b:66:cc:bc:75:a7:41:19:cb:d0:70:0b:3c:d6:
         ec:24:f0:c0:a4:7b:34:ea:76:be:0c:56:e1:65:37:0d:2f:ba:
         99:7c:8b:1f:cc:b8:4c:19:df:0a:7d:75:71:45:2f:c1:b4:23:
         ff:cb:fa:14:10:b7:fd:da:6e:f9:01:c7:0e:52:86:5f:a8:e4:
         7a:19:17:27:b7:29:0f:7d:7e:a8:b4:77:99:4f:54:49:cd:18:
         a0:cd:0a:85:d4:fe:65:4b:55:e2:6f:b3:8e:9f:b5:94:10:e6:
         11:d0:25:22:2d:c2:75:d9:0c:22:39:1f:02:50:02:cf:1c:a9:
         57:20:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----