Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File:                     7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier:          IA789Nk5+73nbjplfI+IZR05IW6Oh1yeVsHrcVU3ues=
Subject key identifier:   55:F3:6E:FB:FC:91:2C:AF:A3:F4:FD:F6:67:CB:82:FA:16:38:C1:C5
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer:       /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial:       01962E2AF95D6A9711924FA823D02871DD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number:          0CB7
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
                          2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: KvGuhFb1SEhwzongeIw0jxpzFVSvlBn3mkrapT90BAE=)
                          3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f9:5d:6a:97:11:92:4f:a8:23:d0:28:71:dd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=55f36efbfc912cafa3f4fdf667cb82fa1638c1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:a2:bc:12:35:6b:cf:35:f7:10:fa:52:b8:
                    e7:52:23:3d:fc:42:ef:8f:55:3c:a2:e9:33:a5:a8:
                    47:c4:44:61:d3:cf:be:5f:c9:e9:c3:9c:2d:2a:68:
                    ae:42:68:9b:6b:fb:75:e8:c4:2d:88:c3:b9:2b:60:
                    34:75:8a:b8:42:70:fb:99:77:59:b7:1e:23:a3:7d:
                    e7:9f:dd:57:6d:11:af:47:d4:8d:8f:a5:dc:ba:51:
                    43:de:32:22:04:d0:51:51:44:95:24:a0:b2:0a:f1:
                    4b:5c:3a:ba:bc:3c:6a:d9:8f:cc:ff:fe:3b:7f:e1:
                    f6:a2:c8:e6:a0:e3:c0:f3:19:64:df:75:9e:04:12:
                    30:64:c7:9a:ce:4c:d3:d4:75:8f:65:45:37:2d:65:
                    e7:11:fa:ee:59:65:14:e7:db:d6:a9:da:e5:74:50:
                    5f:6f:24:2f:57:fa:71:1a:8a:d3:1d:9f:78:3b:f9:
                    6e:f1:61:55:9c:af:3c:49:ab:b1:ed:f9:1b:43:09:
                    b1:7b:85:41:4a:85:3b:f1:f5:f6:d5:dd:06:05:ad:
                    20:c1:f3:47:65:c3:5f:73:6c:4a:6e:25:4e:14:14:
                    e8:83:20:4d:87:8d:fe:09:ea:33:b3:90:03:d1:a2:
                    93:1c:89:3c:42:07:b2:de:67:f8:9d:79:cc:38:b3:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:6E:FB:FC:91:2C:AF:A3:F4:FD:F6:67:CB:82:FA:16:38:C1:C5
            X509v3 Authority Key Identifier:
                keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:57:1d:f1:62:f1:0b:41:13:99:05:9d:1e:be:8e:01:cd:
         00:60:8d:05:98:f9:7c:8b:4e:d9:0c:bb:6f:20:2f:94:e9:11:
         0d:c8:4a:51:8c:46:78:5c:90:b2:10:14:d3:23:94:3c:65:e5:
         bb:74:71:98:7d:f3:6f:ec:32:2b:77:af:85:b8:1c:d0:d3:b0:
         23:31:76:1d:e4:31:30:34:7c:a4:3c:8b:d3:96:38:5f:66:b0:
         0f:7c:16:d9:9a:0b:cf:5a:c2:f2:40:fd:84:e9:f4:b2:11:eb:
         56:a4:f5:c1:58:ba:ea:3b:fc:9c:6f:6c:5b:55:90:c5:ff:11:
         8d:19:a1:e6:b6:34:82:61:90:fe:f5:fd:32:91:8b:02:14:3f:
         93:d5:d5:5e:0f:27:e4:24:62:38:3c:8e:34:3c:72:10:9c:8e:
         a2:0d:eb:8f:10:43:34:9a:ca:da:17:da:4d:12:69:99:59:39:
         ec:7a:95:ac:9c:f9:34:53:9e:7b:5a:67:63:8c:46:06:36:aa:
         ff:1d:b2:46:f9:7e:2f:02:e7:e8:bf:c9:f5:fa:d4:b8:24:ea:
         86:91:bb:15:18:30:39:dd:da:39:16:5c:93:9d:88:d3:a4:71:
         6f:b0:81:8a:64:16:ac:c1:29:6c:29:19:ea:ec:97:97:8f:36:
         a4:fe:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----