Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File:                     7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier:          DuHfJ5ZQ3aCMBPHt1dKjGLySt3q7kfgZcWtEZBuJRPU=
Subject key identifier:   BD:C4:DB:C2:3A:35:4C:74:DC:50:3D:0F:BA:10:A0:5D:F2:C5:3E:F3
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer:       /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial:       01962ECFD71DEAC08B5AEA120536E8B51681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: Fos+h7Az69rrBf1mGwlbFVZrGSu/Y6fC9CXwEvQIXDE=)
                          2: F0v3ZdAWJMgM-NX7fWdPVPvmHtw.roa (hash: 5lz4KZFI8B9Thk9y5Q0cmh/EUM6SOuSnTkJHbk1d9g0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:1d:ea:c0:8b:5a:ea:12:05:36:e8:b5:16:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=bdc4dbc23a354c74dc503d0fba10a05df2c53ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:17:bb:49:f2:b3:b3:11:8c:1f:3b:f4:74:
                    7c:6d:13:85:dd:a3:c8:cb:34:6a:2a:98:f7:75:7c:
                    ad:39:d2:a2:2b:4c:4a:d4:d3:93:9a:b1:98:15:3b:
                    fc:2e:af:a3:19:bc:79:2a:48:7f:70:cd:3d:a6:d6:
                    1c:a5:e6:2f:c5:ff:75:30:e1:e3:f2:66:f3:a3:c0:
                    c4:7d:50:6d:87:45:ad:a6:0b:97:45:c4:9b:f6:ea:
                    cb:f4:a7:fd:14:ad:fa:a5:5f:3b:40:68:9b:af:9e:
                    54:0b:c6:0a:a2:d5:8c:ce:ab:35:ff:f8:7a:e5:73:
                    95:fa:30:6c:c5:d0:58:46:ec:a8:8e:71:51:3c:e7:
                    e4:ca:ec:1d:a3:7e:62:f0:54:5e:c3:e6:6b:75:5e:
                    e1:e8:b3:ec:39:96:11:05:83:93:6c:f1:a8:ac:d9:
                    5b:43:73:4c:db:92:6e:76:a0:52:91:d4:17:33:a1:
                    bf:cf:a4:f5:00:cd:d6:19:18:e2:43:22:a4:cf:10:
                    c6:cb:ef:ca:f1:43:bb:a6:44:cf:67:1c:db:fb:25:
                    07:ca:64:3d:e0:1a:63:7e:83:0e:10:31:c4:a5:82:
                    79:4d:16:63:ab:fb:3d:da:be:98:e1:d0:d7:30:1f:
                    ad:21:be:4e:42:23:e3:cb:26:a3:38:92:8e:84:e2:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C4:DB:C2:3A:35:4C:74:DC:50:3D:0F:BA:10:A0:5D:F2:C5:3E:F3
            X509v3 Authority Key Identifier:
                keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6f:22:25:de:91:c0:27:09:9b:ca:c7:2a:ad:a9:e1:63:ff:
         ab:3e:e0:2f:a0:99:40:21:6a:2d:93:c2:9e:6e:8e:e8:1d:7f:
         50:ca:59:ed:96:d2:74:ee:7b:f2:57:14:bb:65:7a:8c:0a:8d:
         7b:a0:be:f0:ce:8b:f3:76:1b:fa:bb:c0:fc:bd:2d:07:45:38:
         4d:0b:94:fe:78:57:b3:a8:71:a0:1a:63:0f:c6:97:2a:fb:e6:
         c5:d4:d8:b1:35:69:34:60:ee:75:a4:b0:d3:d1:d5:ca:c3:ed:
         45:7b:17:79:2c:0e:0c:fe:78:f7:98:10:3b:b1:c2:9f:cb:c0:
         d3:ab:c9:a4:93:eb:1f:0a:e3:48:81:01:9a:91:15:b7:8e:0d:
         52:03:a8:61:c3:dd:0a:4a:da:7a:1d:41:5c:84:19:58:19:d0:
         19:0c:13:51:9c:2d:31:2a:e9:e6:23:de:ae:83:43:3d:df:26:
         41:32:f3:dd:4c:2f:75:23:e8:71:dc:d8:fc:ab:44:37:7c:03:
         3b:da:f8:30:42:f4:4e:f4:9c:fb:6b:3a:85:47:9a:f8:19:99:
         ed:84:cb:9e:08:8f:dc:c8:ef:4f:86:4d:a5:09:22:aa:4e:1c:
         a9:a6:f4:3f:ad:93:79:7c:4b:91:4f:77:ec:ec:52:a4:48:da:
         5a:bd:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----