Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File:                     76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier:          78xr2ijNVMS+LG1HgjLzuOgkgxJxC2NGmI4AlyRR5WA=
Subject key identifier:   00:76:A2:56:9F:F4:CC:80:DA:C0:DE:B9:C6:31:62:88:7F:A0:CB:F9
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer:       /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial:       01962ECF5FB578B1BFE743E3412A340E469F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number:          01DE
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: GsErNsK7/3iJcBb2jOOEYr85tVXUMWKi6YNZmyETvIk=)
                          2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5f:b5:78:b1:bf:e7:43:e3:41:2a:34:0e:46:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=0076a2569ff4cc80dac0deb9c63162887fa0cbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:c0:7a:25:62:dc:26:1a:4c:81:fa:10:a7:
                    91:94:8e:cc:d6:e7:7d:38:ad:b3:4f:91:b0:a4:63:
                    98:a0:b9:58:52:48:f7:ad:13:9d:21:ed:2e:17:20:
                    93:c0:c4:b7:f7:6c:70:4b:29:49:8c:f3:48:d6:40:
                    5e:bf:0b:30:f7:06:b2:0e:29:20:05:75:d1:56:b4:
                    bc:b2:d5:e5:24:5a:ae:f3:6b:0c:c8:1f:16:35:aa:
                    ec:33:bb:4d:bf:c0:4a:70:12:9f:b3:96:67:8a:a1:
                    4d:12:11:9a:ad:32:38:5b:ee:9e:22:95:9a:ed:ad:
                    ac:3d:e5:6a:ab:f0:f0:ce:a1:ef:69:3d:33:1e:c9:
                    2c:fb:8d:05:de:35:2c:ab:39:6c:5d:10:42:21:65:
                    cf:a5:a3:7f:1d:8c:15:17:02:74:10:72:6a:c8:eb:
                    25:2d:12:03:8e:dd:ea:f3:5d:41:a5:15:34:17:30:
                    2b:52:11:22:3e:7b:a6:05:bc:e6:55:c9:fe:1e:39:
                    3e:23:04:4c:d6:f3:32:46:27:e6:2f:f4:ac:a7:91:
                    65:c1:9f:3c:37:5f:68:e7:63:72:0b:ef:de:3e:a5:
                    00:80:f5:a7:5a:e6:73:ab:f4:53:79:f6:cc:9f:e1:
                    dc:4b:ba:a9:86:44:f9:ad:98:9d:6c:f4:f1:bb:a0:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:76:A2:56:9F:F4:CC:80:DA:C0:DE:B9:C6:31:62:88:7F:A0:CB:F9
            X509v3 Authority Key Identifier:
                keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5d:4d:28:f2:95:87:9b:3d:62:8d:bb:9f:54:b7:c3:69:00:
         e2:05:da:1b:3c:35:e9:85:cb:59:c8:68:e4:90:64:5d:3f:25:
         61:6e:d7:07:4d:0b:97:06:9e:92:e8:fa:68:9b:7f:d4:d0:98:
         a5:51:73:07:81:d2:2d:9e:13:a3:b5:1a:ed:a5:ab:08:54:ed:
         6e:37:c4:6d:02:6c:dd:cd:bc:a9:b1:95:15:47:37:aa:70:5a:
         fa:54:ca:b6:7b:fc:eb:d2:d7:53:de:58:8b:60:99:28:d3:38:
         d2:85:5b:b0:99:30:82:06:18:c2:37:5d:39:b4:c3:25:e7:a5:
         ff:0d:0a:39:8f:6b:15:9e:d3:b9:ce:38:c4:9f:75:88:e5:67:
         6d:3e:32:d5:8e:9e:f5:f1:da:f2:d5:f4:10:e6:22:a2:20:e7:
         6f:05:e4:bc:cd:d2:93:67:dd:db:9e:ca:af:0b:c3:5e:68:3f:
         52:3b:da:08:04:44:e3:a7:01:22:4b:87:d2:ba:70:4a:b2:cf:
         10:90:68:81:80:6b:24:2a:0c:0a:03:7f:9a:41:31:b0:38:04:
         83:74:3b:35:e2:78:28:df:9c:3a:90:d2:ac:ce:a5:46:78:c2:
         14:a9:6f:28:5d:c0:5b:64:9c:09:be:7b:33:4c:64:81:27:6e:
         32:84:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----