Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          STnynXMdbhhopKS+/f+3SAKQX/6XG70q01aVySIbp8k=
Subject key identifier:   5E:47:CB:A3:B3:E5:7E:72:37:E0:C0:A2:71:DD:30:A3:09:05:BC:A6
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       01962FAB3BFC665E16AE46A8DA6CBF124C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          12EF
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: iJUDDbrQ2oQ+TheOdABDQsQOfVZ54iOzSUVwcbIsIfs=)
                          2: DoWPZtpC_HWnwGYFf_FzalBO300.roa (hash: WIbVE4iIQHDloWZiobD5nOBiotUirQnxdqGFBtG1XvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:fc:66:5e:16:ae:46:a8:da:6c:bf:12:4c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=5e47cba3b3e57e7237e0c0a271dd30a30905bca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:2f:e0:16:f9:ba:92:d8:81:19:b1:05:c4:
                    cd:ff:76:d4:e0:3a:97:54:af:d0:cb:6a:b7:b0:9d:
                    df:ff:cc:2c:d1:8e:9d:da:5d:10:b2:86:4c:d7:6a:
                    e8:b8:3a:a9:ba:19:5c:27:e3:d8:4b:04:21:99:ed:
                    4d:90:22:9d:e2:7f:d2:b1:b6:3d:ef:e7:6d:74:23:
                    05:fe:bf:f1:e7:27:1b:5e:cb:19:e7:24:59:e6:b2:
                    b3:17:46:5f:32:5a:ba:83:c3:65:8a:b1:02:86:f3:
                    0d:96:0a:68:be:ec:eb:b0:13:8c:ca:a4:48:d2:4d:
                    a4:61:57:2b:d5:cb:c7:e9:d9:1b:07:68:6d:52:af:
                    7e:d7:be:fc:1b:c6:5e:19:7a:ca:28:b4:54:31:6f:
                    2a:f6:40:73:5e:c1:a9:2a:6c:53:66:65:71:89:aa:
                    54:0b:42:84:b6:47:73:12:48:70:de:6e:40:e4:47:
                    ba:fd:5a:0c:79:13:56:d3:8e:39:a2:6f:66:ab:fd:
                    08:4b:14:f1:c9:04:1b:fe:9b:8a:4a:93:a1:df:7c:
                    17:73:43:5b:c4:22:97:c7:64:f9:ad:3f:0d:35:11:
                    05:31:8e:fb:d2:77:39:ef:6e:d1:51:91:ad:a9:e0:
                    08:99:23:67:33:1c:aa:4b:43:67:74:d2:9f:b4:a2:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:47:CB:A3:B3:E5:7E:72:37:E0:C0:A2:71:DD:30:A3:09:05:BC:A6
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:46:d2:90:8d:19:16:27:3b:a5:a1:88:ac:da:e8:3d:3f:83:
         8f:eb:f4:ac:0e:32:f3:fc:03:4f:42:07:8e:c8:40:5b:2e:98:
         7e:1e:f2:1f:db:2b:e3:cb:8c:9d:e2:d4:9b:9c:61:66:09:e2:
         6d:ba:ca:31:52:b9:84:fe:49:39:5a:6c:86:dc:c6:90:a5:bb:
         a7:a4:6f:97:92:f0:96:50:54:a6:34:1a:ae:54:d7:ac:0d:40:
         b0:34:ce:35:c7:d0:b4:49:19:40:e8:14:9f:bc:68:ce:22:7b:
         9b:c2:b3:e5:d6:69:b0:9e:3b:d8:55:d4:d2:a9:05:d9:f5:6d:
         70:23:d1:3e:bf:e4:3f:46:42:bc:73:1b:9e:97:73:72:10:99:
         65:1b:20:f7:bd:91:47:e7:ae:aa:f0:c6:14:b9:79:33:f6:ca:
         17:d3:68:f2:77:27:f7:5f:84:d6:ed:9e:14:e9:62:2c:49:7a:
         8d:c1:e5:17:5a:14:84:08:1d:20:61:57:a0:04:ba:4c:15:88:
         3c:15:9a:2c:5d:7c:8a:61:3f:6a:6e:9f:b8:90:dd:42:91:84:
         b6:53:42:be:a8:d0:ae:7a:fc:dd:1d:f1:ed:e1:35:e9:52:e4:
         e0:80:0b:11:fc:b2:63:93:8b:51:47:52:e0:e6:58:b0:ef:57:
         30:a0:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----