Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File:                     x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier:          kP1jLUMzD5b+HBlsm6e3dh4eWR9wBt7/9xhcR2zRMqA=
Subject key identifier:   F9:7C:F4:D0:0C:55:85:21:DE:F4:4A:FD:F9:09:98:BE:AB:A0:AF:D3
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer:       /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial:       01962F74444B258A371CF3A3D8BEF5BF2EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number:          0C70
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=)
                          2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=)
                          3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: DPt7UHyyupR9cPKhDSY+59kgvdeWbd6yrlPg9r+lZJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:4b:25:8a:37:1c:f3:a3:d8:be:f5:bf:2e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=f97cf4d00c558521def44afdf90998beaba0afd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:73:f8:db:7b:0d:12:ee:2e:4f:dd:03:ed:
                    05:b7:15:78:ac:0f:89:b7:5e:af:ca:b0:8c:c6:a4:
                    7d:6c:5e:f1:8f:36:5d:f4:37:9d:f0:c1:ee:15:b8:
                    07:80:14:3a:ea:f9:d4:6c:62:7b:cb:55:14:03:59:
                    38:d6:d5:fe:61:18:e1:65:04:8d:16:62:6f:08:5d:
                    57:d4:d0:eb:58:3a:4d:5d:11:f7:72:1a:c9:7f:19:
                    eb:c4:66:7a:92:4f:ca:66:cf:e7:7c:62:9c:d6:41:
                    29:72:4b:81:3a:7f:7b:7d:5c:b2:12:e9:47:33:09:
                    0e:72:45:9c:b3:aa:84:86:ff:9e:b9:44:26:cc:6f:
                    6f:f7:a7:08:be:47:98:2f:55:26:9a:ae:8a:8c:eb:
                    61:ad:79:f9:03:37:89:3a:a2:90:4a:70:db:6f:6d:
                    16:38:dd:e6:9b:69:6f:c9:a2:e1:f1:9a:4e:88:48:
                    c1:c5:eb:82:11:72:be:85:7a:8d:27:c8:46:35:87:
                    a1:45:3c:ed:e1:5b:df:58:25:18:86:78:b5:f5:13:
                    8e:dd:70:e0:52:1d:36:99:13:35:7c:63:c7:76:0c:
                    c6:13:67:14:6c:3d:e3:35:b2:63:70:95:d8:84:9a:
                    fb:05:61:4e:c2:a3:4e:17:e8:b9:1f:96:99:3a:50:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:F4:D0:0C:55:85:21:DE:F4:4A:FD:F9:09:98:BE:AB:A0:AF:D3
            X509v3 Authority Key Identifier:
                keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:96:f8:c5:98:83:56:08:60:53:51:0e:a6:83:ab:75:30:
         ab:15:4b:0e:48:b7:64:9c:bb:72:82:50:08:98:5d:43:71:e3:
         2d:3b:25:b1:da:ea:a9:7d:ec:c2:76:5f:b6:b5:27:a5:6d:db:
         aa:0f:82:4b:1f:9f:aa:01:18:a9:8b:b7:47:88:78:79:f0:7d:
         2a:f1:6d:ed:ed:d0:75:d2:39:ef:24:db:12:a6:4c:89:75:0e:
         b6:da:94:cd:b2:6b:52:a5:27:1e:d6:69:99:a6:32:4a:2f:11:
         89:63:a5:ab:08:3f:15:05:a5:36:b5:98:a7:92:f3:60:4d:4d:
         0d:ec:26:dc:4e:99:d7:71:9e:c1:d6:3c:a2:4a:56:45:82:8f:
         4e:bb:1f:e4:31:02:0a:2b:d0:6f:28:3d:6f:ef:f4:c0:52:18:
         31:4d:f1:2d:b0:9a:8e:24:40:5b:dc:8a:fd:9b:a4:c6:7d:7e:
         d8:e2:32:81:ab:4d:c4:31:e8:2e:e2:5b:15:1f:a5:94:a0:54:
         6b:c3:f3:83:8e:3c:1e:fa:b7:90:67:b1:93:20:fc:d3:fe:76:
         1f:bd:fb:de:5b:4e:ad:89:49:1f:2e:21:35:2d:5a:91:7c:de:
         c4:6f:81:56:74:9c:78:ec:2c:e0:39:65:b6:82:7f:4e:45:10:
         0c:98:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----