Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          F75axWWrFgxzvlGl5HZK3+G+xJGJjX2f1h2SKzE6ogY=
Subject key identifier:   4D:B7:85:9E:BE:5A:C6:05:8B:58:AD:DC:88:DF:E6:96:49:0C:00:9E
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       01962F074055C4EDEF5B2A737A4A24EAB66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: oHKK9hGZiULKIQnD9a/eLVal527fOOzzvfRtKtLtwas=)
                          2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:55:c4:ed:ef:5b:2a:73:7a:4a:24:ea:b6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=4db7859ebe5ac6058b58addc88dfe696490c009e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:6c:9a:b6:aa:f8:f6:7e:1d:a2:a8:28:b7:
                    7e:4b:44:60:c8:10:af:ac:7a:13:5c:8d:75:f9:73:
                    c2:5e:c0:fb:88:d8:e4:4f:b2:e3:b2:5c:22:3d:0e:
                    6d:cb:62:c4:b4:4c:a1:0f:9e:a4:dc:a5:93:80:ee:
                    dd:07:4e:10:5c:e9:f5:2f:dd:d6:52:78:28:ae:cf:
                    23:07:90:bc:a5:ef:10:e7:40:d9:09:53:4c:99:9d:
                    67:5c:51:a9:66:ec:fd:b8:fb:f6:bf:3a:52:d1:18:
                    ae:c6:94:b0:42:03:d3:5b:e7:23:46:c2:d4:1c:c9:
                    ba:ef:a5:97:5a:40:41:36:67:50:e1:c0:fd:77:4d:
                    3b:c4:41:1d:47:8f:70:d3:d3:69:8c:ae:0d:77:6a:
                    b2:81:bb:28:3a:97:b0:fb:31:25:7c:93:1c:78:84:
                    13:52:17:ec:49:4c:f7:06:2e:ea:4b:5f:87:88:1b:
                    5b:82:b8:74:1a:61:76:a0:b0:8d:40:d1:d8:23:94:
                    c6:29:80:ac:ea:5c:08:3e:35:38:38:83:dd:7c:64:
                    29:6f:3b:ee:d5:94:c8:64:11:c0:16:a4:31:60:04:
                    c5:ab:e7:2b:68:83:65:16:9e:95:73:48:9f:ec:4d:
                    34:0d:44:c2:83:ac:96:65:4c:c9:1d:e8:7c:bc:40:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B7:85:9E:BE:5A:C6:05:8B:58:AD:DC:88:DF:E6:96:49:0C:00:9E
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:34:4a:41:ed:44:6e:00:9b:73:8b:c1:28:1d:7d:47:a9:bb:
         ed:e4:07:44:fb:de:2f:10:76:15:6f:4d:7f:cb:42:02:f0:23:
         f1:a4:2e:a5:0a:ff:54:66:5b:7a:65:bf:58:f4:f7:2f:1d:74:
         d3:0d:46:04:74:ef:6a:23:5f:bf:7b:a9:74:8e:19:11:a0:ba:
         8d:a0:bf:69:4f:aa:ef:04:c6:4e:1a:0a:74:53:17:41:58:d7:
         be:6b:d7:12:c4:18:59:87:e7:04:19:10:0d:ac:e5:8c:08:36:
         71:31:41:42:2d:d2:67:bb:80:e9:2a:ab:5e:86:e5:f8:0a:92:
         ed:32:1b:8b:60:38:ba:e9:89:7e:41:ba:49:9e:be:7d:e3:10:
         8e:b5:08:61:c6:fd:e0:a1:7f:a4:4f:33:f1:a8:22:26:92:0f:
         5d:ab:72:33:57:63:f7:09:12:45:1d:04:5a:2d:05:a0:b2:6f:
         f5:15:da:12:e6:bf:8f:03:b3:d5:32:08:33:f0:16:da:32:1d:
         57:7b:9e:09:bc:5a:2e:f8:d3:e4:94:29:d0:b4:38:ac:8d:6a:
         8c:21:f7:91:ce:1e:0c:08:93:56:e7:56:df:ab:62:14:81:7f:
         5e:b0:65:a2:14:53:73:64:d3:21:d7:73:fe:9f:91:b4:ac:5b:
         fa:3b:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----