Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          5bjUNEbtmXPwilhmn2DWy3vkNnua1IhRfTrjPr2aIhg=
Subject key identifier:   80:17:59:6C:1A:FA:3A:8B:5E:2E:48:4B:B6:A1:8E:09:01:39:C2:97
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       01962F06E574AAD16920379081FB267892D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          10BA
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: VZmW4ubce2iDB2n7eRvoVDnq5JYB3P/bL9lYuD5FTfA=)
                          2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e5:74:aa:d1:69:20:37:90:81:fb:26:78:92:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=8017596c1afa3a8b5e2e484bb6a18e090139c297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:84:77:ab:d3:ea:6f:bd:89:5a:8a:c9:be:
                    30:e6:5b:c4:4d:83:78:08:9b:96:89:37:16:a1:cc:
                    ea:e0:3c:f1:7f:b9:6f:cb:a5:c9:2b:af:a2:8a:f2:
                    b3:7e:cc:10:24:b9:64:5b:f5:b7:6b:b5:08:bd:01:
                    91:eb:85:51:06:d2:00:a7:f1:be:e4:db:1b:ef:10:
                    ee:f2:6c:cf:e9:af:11:f8:4b:71:f6:7f:31:e1:15:
                    75:3a:98:c6:36:79:44:06:25:bc:a2:99:3e:7e:7b:
                    8a:1e:7e:d8:ca:ae:5c:47:d3:be:37:58:bf:1a:e1:
                    c9:98:b6:b5:07:48:b1:9e:f0:09:69:de:7d:3f:21:
                    cb:89:40:74:84:ac:bc:ec:47:d3:b8:a4:4e:d2:b6:
                    93:e2:2f:83:6f:62:2f:55:55:fe:6a:47:d8:4d:5d:
                    0f:e7:46:bd:19:6f:74:33:dd:ed:f4:20:c9:24:92:
                    0f:33:82:c4:f8:61:c1:de:9d:cd:d1:3b:4c:3e:e6:
                    ec:5c:14:2a:9b:39:e3:14:9e:df:91:30:b5:c5:25:
                    f8:11:b7:8e:fc:ae:d6:82:84:5d:68:79:3e:49:55:
                    0a:a4:d6:3e:67:19:c5:4a:42:1b:8a:ff:d3:cb:43:
                    5d:30:db:0b:61:08:f7:f8:86:1c:4b:c8:7e:87:55:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:17:59:6C:1A:FA:3A:8B:5E:2E:48:4B:B6:A1:8E:09:01:39:C2:97
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:45:d5:1a:11:02:27:14:f6:fe:15:52:03:00:57:e8:30:6d:
         6d:f4:db:59:ae:85:f8:46:f7:34:81:64:28:b0:23:15:25:74:
         32:33:10:6f:1e:76:87:76:22:18:1c:92:04:3b:be:a3:d4:43:
         a3:51:6a:36:0e:68:f5:b6:28:30:7b:d7:05:84:d6:06:23:5a:
         d7:c6:55:2a:95:d5:41:35:22:a5:3f:61:9c:f8:2b:19:2d:97:
         cd:fd:07:f5:4a:1c:d2:c4:c0:3c:db:65:be:af:8b:a9:7d:1e:
         46:3b:5a:b1:ef:1e:00:bd:bc:bf:c5:8a:c5:ff:00:9a:bd:ba:
         64:56:ca:94:b6:11:8d:8e:4e:d7:cf:c1:3f:de:fa:70:87:1f:
         78:ca:c5:17:61:9b:ab:7e:9d:e4:3f:d3:a6:26:9a:e4:3b:f1:
         31:8a:f8:b2:10:9f:e7:09:ce:76:d3:bd:91:31:2a:28:ac:52:
         35:82:dc:b7:93:fe:36:9b:41:a2:99:0d:c4:e6:ff:e9:c2:15:
         15:f1:e5:5c:83:a6:d4:e6:07:a9:7f:e2:29:54:d7:14:e9:c6:
         ec:1e:a5:53:66:79:58:5a:01:97:f6:44:d3:5c:ad:9c:7c:a0:
         2f:b2:bd:cd:8f:e6:fe:2e:f8:ef:be:0d:c4:ec:f3:1f:36:e6:
         c7:3f:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----