Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
File:                     51qM71_SqPGFr_WajG692YNjrGc.mft (raw, json)
Hash identifier:          TWAuCYbsqDvUpxNgvZkLBuCXBYrBmyZmCXgKYcdnfog=
Subject key identifier:   75:6C:87:37:BE:D1:72:DF:C3:83:B0:A8:32:CC:D1:F2:8B:CA:F9:71
Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
Certificate issuer:       /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Certificate serial:       01962E9898ECA5D26292DCC9DA95BCF3A84B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
Manifest number:          075D
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: 0IBqXjTVhcvD4lCSiVgJHykRKw4.roa (hash: Dumvxj6VzhZyR7xgjdh7+SNA6SS4v9smnXFYVL96Sao=)
                          2: 51qM71_SqPGFr_WajG692YNjrGc.crl (hash: aN1aPUHuIoU64PCMKZYs4PBrONvThKx2Lx0ysXTBDrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:98:ec:a5:d2:62:92:dc:c9:da:95:bc:f3:a8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=756c8737bed172dfc383b0a832ccd1f28bcaf971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:b0:7d:cb:53:6b:6c:db:19:8a:26:88:cc:
                    97:40:75:f3:2b:e1:b0:8b:36:a3:d2:02:96:40:b9:
                    d6:a9:5d:61:b3:a2:e4:1a:21:1c:98:b8:a7:4f:39:
                    df:35:f7:dd:5f:20:f1:9f:bb:8e:fd:50:75:aa:88:
                    3b:a4:78:09:4d:75:3c:95:6f:e7:55:38:b7:96:d7:
                    c8:a1:2f:21:30:43:63:4d:82:13:e2:c3:00:dd:32:
                    c8:fc:e7:8a:34:5d:3b:60:a8:27:7d:e9:0e:05:5a:
                    4d:3f:77:32:a3:02:e5:f6:85:de:ef:bf:2c:b4:5f:
                    3b:7f:85:76:c6:a8:90:06:de:32:f3:22:92:82:a9:
                    60:21:bb:d1:2e:bf:b1:be:33:1b:87:9c:28:c9:e9:
                    0a:12:10:cc:ac:ff:56:f4:2f:a4:e0:c9:30:9c:25:
                    11:59:46:bf:73:fc:42:ff:f0:4a:c0:0b:7a:fd:b5:
                    f7:bd:4c:08:68:73:17:d9:81:8a:5c:fa:04:9b:94:
                    4b:86:36:e2:51:ae:02:11:18:72:d0:9d:f6:d3:b5:
                    ad:fd:6f:b3:b6:86:44:be:4b:a3:69:98:6f:11:b6:
                    36:e7:f6:3b:67:c7:4c:a3:34:ee:7b:a1:0b:aa:ad:
                    92:5a:0c:43:c3:bf:37:3b:28:57:07:25:94:7a:7b:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:87:37:BE:D1:72:DF:C3:83:B0:A8:32:CC:D1:F2:8B:CA:F9:71
            X509v3 Authority Key Identifier:
                keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:84:e0:56:9e:48:e8:16:f0:3a:73:71:a1:7a:a9:1c:83:
         ea:44:ac:c1:d0:ea:f5:47:3f:12:66:6b:5f:cf:b2:c6:25:c1:
         a0:a3:ba:56:e2:94:60:09:c1:bd:a7:c4:36:1f:10:a8:9b:81:
         68:44:e8:0d:d8:88:2c:37:78:36:67:b9:90:7b:61:e4:55:94:
         7d:24:be:0d:2a:89:06:19:1c:63:87:2b:e6:03:d8:2c:b3:c3:
         81:60:b1:26:e2:58:e6:64:af:ae:23:25:4c:41:29:cb:72:ac:
         ef:5a:d2:3d:15:c2:21:22:82:23:ea:33:7b:85:90:df:a8:23:
         08:fc:67:eb:25:6c:a5:f6:b4:4b:f9:a6:1e:11:70:a2:fe:e0:
         73:27:32:54:0e:ad:78:12:78:6c:73:38:71:7a:38:98:f0:33:
         80:83:50:39:6c:47:a0:64:51:46:d2:29:5d:c9:12:a2:f4:7b:
         6d:bd:f4:8d:ec:a6:bf:98:a6:98:de:c6:a1:f9:77:04:df:01:
         4f:9d:6b:84:6f:da:ed:11:94:c9:9b:8d:9f:b8:63:9a:31:a2:
         ef:76:69:f5:63:9b:da:ea:31:4c:d2:97:b9:af:16:7a:4f:4a:
         eb:e3:07:8d:e6:c4:e5:05:13:d2:b6:e3:31:10:eb:15:31:d7:
         da:35:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----