Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File:                     cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier:          7xL4hBpEM2N44woRDyngaLcF7lpI3AKdmoPDuqnh3mA=
Subject key identifier:   EB:6C:38:A4:CE:CF:47:DA:25:84:DE:0C:56:5E:B7:2F:21:95:77:85
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer:       /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial:       01962ECF6B45FE832F6FE0D911A31EBE3A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: V159GB3mshn+z973ouJbNdIKA8sC+aAJw+Uqk2DDE0A=)
                          2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6b:45:fe:83:2f:6f:e0:d9:11:a3:1e:be:3a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=eb6c38a4cecf47da2584de0c565eb72f21957785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:f9:aa:1d:0a:c4:9a:b6:c6:68:59:0c:c6:
                    cf:7e:8f:2e:0a:45:ad:6d:1b:f1:b8:03:66:89:2c:
                    9e:c6:00:27:5f:53:b7:c4:a1:e7:09:d1:32:23:f5:
                    56:f4:5c:8f:a7:3a:1b:7d:92:2e:4f:20:53:9a:3d:
                    c0:5f:be:b3:a5:8e:ee:a7:27:37:20:91:a4:7f:27:
                    0d:fa:9d:6e:16:66:43:40:ed:e9:ca:a1:f7:81:94:
                    10:63:93:8f:59:1b:5f:88:0b:b1:e4:d1:13:cf:f5:
                    09:d7:3f:a5:a5:c8:ed:10:82:77:58:bf:03:f8:7e:
                    77:57:9f:bc:99:be:c1:74:40:b4:69:a3:13:f3:16:
                    27:8c:68:2c:b7:49:c3:1a:43:ff:cc:05:cd:4e:5c:
                    b4:5b:1c:ea:9a:9d:8c:8f:ac:76:62:ec:b6:1f:fa:
                    ce:83:8a:d7:35:f9:62:8e:9d:9a:49:9b:36:f2:00:
                    4b:7c:e3:c0:60:0e:90:db:00:2c:9c:21:64:1c:32:
                    cf:bd:1b:15:b2:57:a5:31:b0:57:2d:e1:8d:63:e8:
                    5b:ee:80:8d:58:0c:de:c7:de:e2:33:59:69:b7:98:
                    5c:21:bd:fc:4e:42:e0:a6:1c:c6:63:9f:91:58:1c:
                    8d:46:c3:08:a7:01:7d:24:30:bf:40:b2:25:18:c5:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:38:A4:CE:CF:47:DA:25:84:DE:0C:56:5E:B7:2F:21:95:77:85
            X509v3 Authority Key Identifier:
                keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:57:02:65:4f:e2:a6:0c:6a:23:f8:aa:4c:ea:71:cd:54:79:
         db:8d:33:d7:91:5f:a8:b4:83:37:b3:c5:fd:66:f9:f1:a6:0d:
         12:94:f8:29:5a:10:3c:2e:75:44:dd:af:92:0f:af:02:87:1b:
         41:0f:59:99:a9:d3:47:c8:c4:19:75:62:c0:08:ea:d8:4a:bd:
         1b:ab:26:14:d2:5b:a5:47:d2:74:b5:4c:b3:ff:06:c5:ab:fa:
         fa:01:44:93:4b:a4:a2:6d:75:38:7e:4e:94:2c:be:8a:9b:72:
         df:05:fe:ac:47:49:a6:dd:05:f0:b7:83:47:0c:df:88:d5:67:
         04:55:b1:ab:ec:1e:f6:61:ff:94:26:50:21:fb:22:02:00:de:
         bb:32:05:c7:5e:bd:3f:a6:c5:39:bb:44:ab:4d:09:ec:20:b8:
         f9:c6:cf:86:12:e6:a3:9a:a9:71:7a:c9:8d:04:0a:bf:ac:ec:
         8c:17:d3:d2:9a:06:b1:e5:42:6d:ca:d6:df:49:58:68:87:db:
         d1:97:44:1a:29:7d:0f:13:fb:3c:06:3d:1a:ca:7f:45:51:d2:
         7e:7e:37:ba:c4:0b:7e:2d:d5:98:aa:12:33:81:5c:a0:30:fd:
         82:67:7a:a7:37:7b:55:80:85:aa:4d:00:eb:16:73:70:a5:cf:
         d7:77:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----