Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File:                     xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier:          KEhaIrLFKMrTYcLgH4R3uVX1bCoG6oBNZg1yVFJ+dxc=
Subject key identifier:   CF:6C:3B:E8:80:46:FE:4E:55:A6:7A:67:D0:62:3D:7A:83:F8:E3:8B
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer:       /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial:       01962ECF8F1554CABA18778B137C67D84211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
                          2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
                          3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: qC0o7w2bHo0/vwL9m6gQceIF71f63s9QAI0bRhkjg+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:15:54:ca:ba:18:77:8b:13:7c:67:d8:42:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=cf6c3be88046fe4e55a67a67d0623d7a83f8e38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:dc:33:bb:d4:51:8d:0c:ee:88:b9:74:7e:
                    7e:d0:08:14:7d:49:14:d3:c5:12:27:8a:02:1e:e0:
                    b6:32:ab:dd:b4:1d:d1:00:c8:d5:e5:57:b8:46:f7:
                    93:57:92:2d:48:37:cb:74:b6:ee:ec:69:78:7f:96:
                    5d:ba:63:be:c9:ee:60:56:07:33:24:a4:44:66:66:
                    6f:82:d2:f1:15:ee:e1:37:b3:93:4f:fa:95:f9:e1:
                    50:85:f2:53:49:57:4c:60:41:7a:85:70:5a:80:65:
                    83:37:79:7a:06:76:e8:4d:35:09:2e:9f:d0:31:5a:
                    01:c8:f4:e4:50:d2:b0:de:8e:9b:5c:48:28:d9:8a:
                    3f:d4:36:f9:68:da:e4:b4:52:85:4d:c5:59:61:5d:
                    85:cc:d2:a3:d0:88:6c:46:a5:dd:97:89:2d:c5:73:
                    58:01:5b:5f:97:51:72:48:10:c9:5f:99:5f:2b:86:
                    6f:a1:b4:65:83:8a:90:1a:5b:b8:d4:2d:00:fa:4b:
                    18:45:e7:09:b0:4d:0f:47:57:10:c4:36:27:02:03:
                    27:ef:dc:61:16:34:85:2d:76:c3:0a:53:94:05:43:
                    1a:a9:b1:94:71:95:bc:a8:50:78:23:1a:fb:8a:ba:
                    a3:db:bc:8c:26:c8:8c:6e:08:3e:ef:13:de:02:fb:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:3B:E8:80:46:FE:4E:55:A6:7A:67:D0:62:3D:7A:83:F8:E3:8B
            X509v3 Authority Key Identifier:
                keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:9c:44:80:4e:05:0a:dd:19:9d:32:98:f3:84:23:8d:1c:
         ec:10:88:a4:78:80:5c:32:30:ed:02:5f:64:67:0d:03:fa:e4:
         8b:c4:a4:8b:fa:e5:c6:68:89:26:41:23:43:70:37:d1:b5:37:
         4a:ec:98:21:2f:a8:88:fa:6d:59:ea:ec:63:19:84:fd:98:2c:
         bf:53:34:e8:27:dc:13:00:df:67:92:a5:9c:4b:10:95:85:31:
         6b:e8:b5:ed:fb:74:4a:88:5d:d7:50:0f:68:e0:39:66:a4:17:
         44:3d:77:85:2f:d8:7a:6c:2a:1e:a0:c8:3b:0a:43:55:28:fa:
         8e:d4:0c:27:5d:fe:de:59:3b:22:8a:8c:30:d3:eb:06:7a:76:
         2a:74:ad:4e:5e:82:cc:3e:de:c2:01:86:f6:48:ea:77:08:7c:
         17:c0:dd:90:f7:27:50:14:75:d6:db:80:1a:23:7c:72:3a:df:
         be:7f:55:cb:4c:1b:a3:ca:57:69:61:18:64:09:de:7c:ac:19:
         cb:ae:a7:cc:19:56:7b:a9:d4:03:8d:1a:8d:e4:10:41:68:af:
         75:fe:93:d8:98:0e:9d:bf:ae:09:bb:a1:67:a8:5b:35:48:f0:
         db:c5:e8:a2:d2:2a:90:54:ee:d1:73:49:0d:84:80:bb:fc:f1:
         73:cf:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----