Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File:                     7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier:          3wcN1pCW+jmQW9C7gJSgb4eFoZqHfHbV7/b7QkupE8U=
Subject key identifier:   BD:E3:80:F0:B9:12:A9:3C:35:5A:55:A4:59:3E:51:9E:08:56:36:73
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer:       /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial:       01962ECFC1DA41E0667D8A9EDDC85F480DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: FEQI7bwXdLStoUQ0F1jCyZF5LB/I/TPDR3GRJTkHtKU=)
                          2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
                          3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c1:da:41:e0:66:7d:8a:9e:dd:c8:5f:48:0d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=bde380f0b912a93c355a55a4593e519e08563673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:88:0f:2b:cb:6f:b7:21:b4:91:e7:3c:4f:
                    19:c4:84:16:21:a3:10:a4:3a:71:e1:81:a3:1d:07:
                    21:fd:d9:f0:d7:ae:b1:4f:32:f6:85:aa:52:da:11:
                    55:94:d8:b2:15:e7:68:2d:f9:63:6a:cb:3d:68:4a:
                    25:92:40:3b:a1:ef:b6:5a:cd:ce:7c:f5:11:eb:f8:
                    1b:a9:1a:8b:1b:3f:66:49:e2:e6:de:47:b5:d6:38:
                    08:d7:d3:6d:99:13:7c:5b:07:56:56:96:d2:b5:c0:
                    ae:f9:76:17:79:e8:0b:a5:6b:fd:24:66:ba:d4:1c:
                    f3:1b:b4:1c:72:c0:a1:ed:af:4f:ea:d7:59:50:ce:
                    5f:ca:4b:4e:02:b6:10:b4:a7:83:61:78:51:74:31:
                    40:e4:9e:36:70:ee:cc:28:3d:57:14:17:52:cf:ed:
                    d0:2b:7c:c5:86:ba:db:92:e2:71:80:ca:c0:70:e8:
                    4e:52:a4:5f:b9:fb:50:92:32:85:c4:85:24:ff:9a:
                    9c:c2:76:aa:6f:98:5e:8d:04:9e:8a:83:99:73:ad:
                    3a:4e:f1:dc:87:57:10:ab:0e:c6:67:d3:e3:36:b1:
                    bd:5c:3c:b6:9b:9b:c3:6c:16:57:a4:62:d6:e3:0a:
                    24:e3:45:27:74:90:83:a3:7b:44:b4:03:f8:48:c2:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:80:F0:B9:12:A9:3C:35:5A:55:A4:59:3E:51:9E:08:56:36:73
            X509v3 Authority Key Identifier:
                keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:22:69:66:ce:aa:65:aa:e3:13:d1:f0:78:0a:30:b1:88:
         26:fa:bb:08:2f:6f:6d:09:fc:c2:68:34:41:aa:ff:3e:91:50:
         13:ef:39:87:94:da:64:a9:b8:6f:b7:8d:fc:69:cc:c5:ba:e7:
         05:b7:30:8d:83:c6:0e:06:0b:43:48:b6:23:e0:5e:ef:4e:3f:
         b7:d8:69:c2:12:e5:19:5d:e4:6e:39:f0:a8:9c:8e:7d:93:7c:
         79:9a:2c:52:89:6b:96:11:aa:fa:ca:12:7a:1b:73:c3:7c:e0:
         3d:72:fa:31:5a:63:b6:ab:78:07:3b:f1:e3:c8:7d:75:e0:a3:
         bc:08:d6:e1:96:d4:fe:0e:9d:c2:2f:60:02:87:78:b8:54:b2:
         fc:12:c2:f5:70:55:ff:ed:cb:6b:e6:45:77:59:7e:4c:d9:85:
         08:7b:cf:f7:3c:f5:93:a3:98:23:a4:1d:1f:62:da:c8:8e:69:
         fa:ed:1b:bc:de:4d:4f:c1:6e:58:4e:dc:aa:90:23:86:1a:4d:
         30:6f:d0:a9:80:85:65:70:0b:83:b4:a3:51:fe:92:38:ac:17:
         6c:ec:4c:10:4d:4b:e0:66:36:b2:60:fc:ea:84:79:d6:b0:be:
         90:76:e5:f3:08:4b:95:78:89:0f:b6:de:b7:e9:f1:3e:dc:03:
         08:83:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----