Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          yJyQUBuxVV4laewqoFN5auoTKJFjI9l4jB0t9K9MdcU=
Subject key identifier:   D4:40:FB:46:1A:AA:8F:8F:49:16:B2:E1:C1:EB:3E:CE:8A:9C:52:E8
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       01962F74BC3FE2CD1AEF78D56353F7D920D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: y1ELLd3tinjeX07/7aRTzJn6+CdVK7DZi3G7kGMkUC4=)
                          2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:3f:e2:cd:1a:ef:78:d5:63:53:f7:d9:20:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=d440fb461aaa8f8f4916b2e1c1eb3ece8a9c52e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:2a:d1:05:61:36:ab:79:62:9f:54:65:a4:
                    f0:8a:6b:eb:1e:1a:25:9b:1f:64:da:1f:7a:cf:ce:
                    37:01:f9:e3:2d:48:7c:ef:a5:31:2d:22:24:33:fd:
                    f6:21:00:93:82:78:b4:a2:df:39:04:41:f1:bc:5c:
                    8f:ee:3f:ee:2d:73:76:31:5d:42:20:cd:db:e1:42:
                    1e:7e:2c:5f:1e:8c:91:f5:b4:4b:75:88:f5:27:92:
                    41:8e:5d:43:fa:17:59:d3:32:62:1b:6a:83:e7:3b:
                    8d:c7:79:38:3b:58:56:c2:63:0e:fb:55:f3:99:b9:
                    f4:52:05:87:89:23:af:34:d8:8a:24:b4:d4:85:1e:
                    c9:97:8f:a3:95:91:07:a9:ce:04:8f:e2:fc:c9:dd:
                    e4:ee:19:af:91:4e:6d:84:93:6e:f4:3d:7c:ec:dd:
                    b3:5c:ff:e0:0d:b6:9c:18:d5:c0:03:6b:64:52:6c:
                    54:82:76:47:2f:b8:17:23:10:82:b4:93:04:0e:e1:
                    94:4e:f3:7d:c1:f7:b0:58:0c:ef:db:3b:ea:2c:eb:
                    3c:1c:4e:9b:6d:f0:41:23:1c:c1:c4:62:87:85:19:
                    2a:3e:c1:4f:d5:97:be:61:f8:70:9a:38:28:37:6f:
                    9e:1f:24:7a:e7:96:7a:65:80:e1:4f:f6:0b:55:e5:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:FB:46:1A:AA:8F:8F:49:16:B2:E1:C1:EB:3E:CE:8A:9C:52:E8
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:40:2e:b0:dd:13:7c:ec:91:18:63:da:71:93:02:da:bd:1e:
         42:c1:3c:3d:e2:77:70:66:d2:2b:15:9a:fd:b5:d9:03:69:4f:
         32:33:88:1a:c7:e3:68:c1:18:d1:81:7a:16:54:28:d7:8c:23:
         41:04:88:0c:c7:d4:21:8e:7b:25:7c:07:98:26:e3:d1:9a:45:
         fa:af:eb:56:ca:62:54:ec:40:9b:97:35:56:4d:f6:e6:e1:35:
         56:c9:cd:46:78:8b:8d:31:7e:8f:23:11:76:30:1f:bd:6c:b2:
         5a:f1:66:d1:77:7e:78:59:7e:c6:74:55:f3:cb:dc:5f:51:08:
         eb:e7:1c:b3:00:83:30:9e:c8:5d:6d:96:e3:47:ae:b1:6e:26:
         a4:c3:95:df:ec:ac:e6:ed:4d:cf:a7:d7:5a:21:07:7a:67:33:
         cd:f5:44:a6:d1:c6:ff:30:82:99:61:ed:89:95:02:39:b0:cd:
         27:1c:ad:31:76:88:d9:bb:08:28:57:2d:cc:42:51:ce:08:6f:
         95:55:8b:74:e2:7f:c2:3c:d0:bb:a7:f8:e1:de:54:d6:94:2f:
         3c:86:1a:3f:99:f1:16:e9:79:59:aa:03:89:82:7d:76:00:8d:
         d6:c3:39:28:3e:18:99:6a:eb:58:ab:55:1e:c3:8f:37:e6:ca:
         4f:3a:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----