Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File:                     7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier:          QTdVrjZVKY9UEXsAog7Qv4syX2exipklv6ZweDdAZV0=
Subject key identifier:   34:24:0A:7A:C0:BC:5F:22:70:51:9F:3D:72:C0:C3:5D:09:A7:0B:E3
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer:       /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial:       01962E99368CE3EFF3BEFD33BEEEA969A45E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number:          147F
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: yYGjaopL573wW5TphMy5Do3++XPXQYIuCEeD2u3qgrg=)
                          2: AKJNBvg_Wp6-g3QkU1hgfnYKS_I.roa (hash: 8/1gxZ5RhK3Xfc9FWx/YXavES1/BKptW13V8wouvEZc=)
                          3: NPvM3xVxkQ_LMP_9_lAVPXggEPY.roa (hash: WMRbhoyDgXHVdgSvk5Bk4s0agvzfv3IFLc0hFCDdwCk=)
                          4: R2R6Zwpm3C7mEGCf96myxK2TaP8.roa (hash: JHhhJ/hqneURZNBRt/i03bXTcRI7N5eSJkdKe9AFbQI=)
                          5: buWauLtfMC3GcFJJMi4SlwdwaoI.roa (hash: dGDi40pRAf4C2JEAwUiWsT7itHv7hqD0XOyXY8zr8H8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:8c:e3:ef:f3:be:fd:33:be:ee:a9:69:a4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=34240a7ac0bc5f2270519f3d72c0c35d09a70be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:c9:90:f3:67:4c:21:f6:a3:5d:ea:86:e5:
                    cd:f7:cb:fb:a6:5e:88:89:8b:dd:e9:9a:9a:f9:3b:
                    a3:4f:2a:dc:8e:8c:49:24:ae:0d:85:de:9d:c9:70:
                    22:2a:ee:a2:67:2c:26:29:d1:fd:e8:63:33:a2:8f:
                    30:b3:c7:20:b1:90:85:18:4e:ec:00:34:e2:87:18:
                    b8:ff:d7:b1:a1:ab:8a:9f:79:67:c8:4c:d2:d9:66:
                    11:0e:0e:4f:f8:74:5f:b3:d8:b0:69:22:48:28:fc:
                    08:5c:a0:72:f7:11:e9:62:cd:2b:4f:35:36:30:d6:
                    5f:ff:66:5e:96:e0:7d:c4:10:5c:e3:18:6e:07:ec:
                    ec:ec:82:a9:ee:20:54:91:3f:cd:e8:51:8d:83:a6:
                    0f:60:b3:ba:47:0f:22:81:ab:db:87:3e:09:a3:49:
                    63:15:b3:f9:18:38:90:9c:bb:5b:93:e3:39:48:68:
                    b6:ff:b2:e6:29:d3:fa:c9:87:ba:16:9b:ca:d2:40:
                    c3:f0:49:a6:ca:fd:8a:b1:e3:b2:b5:56:ea:f3:8b:
                    62:bd:74:bb:c6:2a:42:2c:eb:4e:58:3e:62:27:0d:
                    2c:fa:d2:d0:8c:ae:bd:ac:12:23:bb:06:dc:73:78:
                    f0:8b:83:7d:bf:96:17:f3:fe:f5:0e:60:30:56:cf:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:24:0A:7A:C0:BC:5F:22:70:51:9F:3D:72:C0:C3:5D:09:A7:0B:E3
            X509v3 Authority Key Identifier:
                keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:6c:5b:50:07:e5:f2:d2:7f:8c:37:b2:15:a4:7f:e5:b0:
         2b:9f:6e:6d:2d:00:63:f2:a3:67:83:f8:dd:de:06:b7:ad:f5:
         0e:e5:bc:cc:bc:2b:9a:d8:e7:3a:27:7e:9f:95:b0:9b:e9:ff:
         9d:14:89:48:e7:a2:d0:59:ed:f4:99:1e:fc:96:0c:29:36:5b:
         5b:f6:36:69:3b:6a:c1:d6:2c:48:87:7d:55:50:e0:39:ba:29:
         00:a8:92:be:60:bd:dc:74:c6:64:06:ba:13:74:d5:ad:6e:74:
         a0:dc:33:90:82:7c:f5:8e:33:65:08:8e:2b:30:6e:56:9b:aa:
         07:45:71:e9:6f:f4:b2:08:ff:af:72:08:d0:95:88:06:fc:89:
         97:22:33:36:10:ef:6d:0c:29:7f:87:05:da:02:9d:37:87:62:
         c0:25:56:4b:e5:b9:69:95:0d:08:c2:d6:64:ed:b4:ae:35:bc:
         2c:bd:90:42:e6:9a:12:f9:d7:3b:1e:c0:65:46:36:89:f4:dc:
         1c:e8:b9:47:47:f0:e9:1a:fe:f2:9f:35:d9:c4:a4:6e:54:f7:
         e7:62:7d:33:71:da:b7:d1:1e:96:63:e5:46:52:fe:a8:ba:91:
         9b:01:65:08:5d:2b:d4:21:6e:e1:2c:b8:c9:57:f7:e9:1f:11:
         f7:b9:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----