Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          RoXodcMzR8J21aXXfo5g2TCN11Zq51N+SMEeLnoxl4g=
Subject key identifier:   1D:C0:27:51:22:BB:0F:27:88:C3:F6:23:39:F6:AE:B2:47:40:9F:05
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       01962E99A2991F55231FBA9C4BBCB787A544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: NEVyHfghC_0IzY6RTdXjWpjvCt0.roa (hash: xHfTcNtnEobrDQmw9/aNxrvi78pLeFshtErwqNjdN7Q=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: VEfKeqKPwPVq9S9baG9IMFZLyhBiDMMXYwbUoHUkZ5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a2:99:1f:55:23:1f:ba:9c:4b:bc:b7:87:a5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=1dc0275122bb0f2788c3f62339f6aeb247409f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:8b:b4:44:bc:98:15:b7:d6:b1:df:5c:64:
                    e6:e8:c3:37:09:0a:b1:65:9b:3d:52:62:f3:1d:d5:
                    e4:3a:f4:24:e8:f7:ff:e5:5f:b8:2b:14:3a:26:22:
                    19:d7:d1:34:39:65:96:8a:8f:7c:13:f3:4e:87:18:
                    4a:4a:6c:70:99:ab:05:dc:30:f4:63:dd:ad:96:ed:
                    50:9e:2f:f0:70:34:04:54:75:7a:84:12:af:bd:86:
                    c7:0c:08:1a:2b:ac:a9:f0:3a:d7:67:17:91:1e:d0:
                    80:e0:72:f6:25:9c:22:df:fe:a0:90:84:22:dc:5a:
                    fb:fc:94:7f:cc:6c:9d:12:5b:2a:22:a1:a4:94:d0:
                    a3:28:9f:08:43:59:0c:10:8f:64:6f:13:0d:f5:c9:
                    a3:62:0a:c5:9d:39:74:16:5c:87:ee:4f:89:63:ba:
                    81:50:34:19:10:98:54:46:bb:ec:ef:82:8a:4c:00:
                    e9:f3:42:43:cb:62:75:3b:a5:cb:87:9d:aa:df:34:
                    91:11:23:13:bb:f0:55:88:ac:a4:20:5d:20:32:9a:
                    4a:fd:18:9f:c2:b8:7e:77:7a:6a:35:21:f0:5f:0c:
                    ab:dc:54:f5:ea:84:64:6f:3d:e7:31:00:f0:52:7c:
                    52:70:54:ef:d2:e9:81:f7:7b:97:c8:0f:84:8e:a4:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:27:51:22:BB:0F:27:88:C3:F6:23:39:F6:AE:B2:47:40:9F:05
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:24:53:15:7b:e7:6a:a0:fa:53:69:77:02:01:3c:54:fb:
         8e:de:0b:f2:fb:98:6c:cf:7b:5f:42:f6:e5:0f:2e:59:0d:2b:
         1d:df:c4:53:4f:cf:59:9c:d7:c0:64:c9:16:ff:59:89:54:21:
         80:96:70:8b:00:65:67:cb:56:97:f6:33:67:5d:79:a9:2d:77:
         21:37:ac:cd:50:a2:05:61:e4:2d:01:6b:67:6f:71:ff:32:62:
         2e:96:ab:df:34:be:5d:fe:64:aa:d9:5b:a7:7d:3c:46:c7:bf:
         82:bf:91:ce:78:3b:a6:6e:68:3f:6e:c0:18:9e:1d:cc:ea:c7:
         56:3a:31:0e:7f:29:8e:ac:cb:20:50:34:6e:d9:0a:6b:c7:d7:
         43:b3:7b:45:11:20:dd:57:08:b9:bf:35:e3:c2:be:4d:00:48:
         d2:21:fa:08:55:c5:1a:5a:5a:d4:77:e6:a2:d4:03:44:33:a5:
         0d:d1:31:6b:20:3b:4e:6b:0e:8c:b3:e4:c1:88:dc:e9:23:93:
         4c:c6:b6:d7:4e:79:a9:3c:a6:83:c9:f3:47:cc:9d:e7:ce:ea:
         6e:ae:8c:de:da:4d:a1:31:db:3f:09:bb:05:4b:c0:2d:8f:75:
         01:60:06:fc:77:8d:83:98:b4:38:bc:ec:d3:3b:82:71:54:58:
         57:a7:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----