Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File:                     1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier:          6wQLJTWQvQHx7WDmnhBg7eBRVZd0zXA9tLozJ+G0TZk=
Subject key identifier:   EE:84:89:15:84:2B:A9:FB:3B:76:1D:4B:E4:C1:62:3C:64:6A:F0:57
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer:       /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial:       01962DF41A89E6E1996790A72632DE47C8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number:          07B4
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: tPt1NHKkrYVlKAdIS8r27jS4u8liXLpIHSy6QE5N2uY=)
                          2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
                          3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
                          4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:89:e6:e1:99:67:90:a7:26:32:de:47:c8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=ee848915842ba9fb3b761d4be4c1623c646af057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:fe:a9:a0:c3:d1:64:e8:45:db:7e:29:27:
                    a1:1c:ab:6c:00:bf:2c:cf:36:91:ce:9c:54:1c:0e:
                    e2:22:9e:e3:5f:d4:84:4c:c5:f8:69:51:af:27:03:
                    9b:7c:6c:52:42:97:ee:17:07:67:16:46:37:96:b5:
                    9f:07:08:66:2f:9d:9a:0e:5d:c9:75:03:72:84:a1:
                    cd:92:80:bf:db:0b:80:29:93:5c:55:11:ed:c9:21:
                    51:f0:9b:0d:b4:17:42:33:49:14:da:c1:bc:c4:dc:
                    b3:0c:19:8e:4a:e5:8f:7c:b6:2d:80:ee:98:c0:79:
                    6b:5a:77:01:0e:2d:0a:67:95:39:0f:53:a3:c1:b5:
                    5c:a9:f8:fd:53:45:2d:ba:ee:6c:f1:ab:1a:00:61:
                    52:3e:07:95:5e:c9:75:31:69:76:53:99:ea:52:0a:
                    d4:8b:06:5b:5a:06:cc:fe:5f:2b:60:a1:d2:e6:32:
                    32:b6:93:88:12:6f:94:fb:26:c6:6e:97:14:08:a6:
                    34:40:28:d0:ac:62:56:92:e6:10:57:6f:bb:b6:0e:
                    5e:71:ed:51:b3:e5:c9:ae:b0:fb:05:d8:aa:72:bb:
                    26:cf:bc:81:3c:c8:8b:14:e9:b2:1f:61:a4:1e:a6:
                    52:13:b7:74:4d:07:c8:15:1c:a5:8a:8e:2f:77:b6:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:89:15:84:2B:A9:FB:3B:76:1D:4B:E4:C1:62:3C:64:6A:F0:57
            X509v3 Authority Key Identifier:
                keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:96:40:bd:2a:3e:ae:83:75:3a:68:ea:4e:fa:79:70:f5:
         28:2b:d7:e2:75:b2:43:a4:2c:11:cb:ba:29:fb:ae:6d:65:4c:
         6a:68:05:b5:fa:e3:a2:b3:39:a9:e6:0e:82:70:35:24:35:19:
         8a:66:b2:c3:4a:a5:14:e6:b1:78:b4:3d:3e:b1:95:6f:3e:7f:
         ca:b9:77:39:20:81:e9:72:1b:27:35:e4:c5:ad:76:00:35:fd:
         0e:13:a5:90:bb:56:dc:44:01:b2:36:0d:2d:0f:ce:1a:c8:ee:
         72:13:28:0b:9b:3f:2d:10:93:7c:5f:0c:fc:0f:4c:aa:9d:65:
         c2:d1:44:c8:98:8d:89:51:dc:29:51:2d:17:53:37:c1:b5:70:
         00:44:63:0f:67:b2:79:19:8f:f0:f6:e8:84:9f:15:b6:1b:fb:
         80:06:2e:b4:91:78:77:1b:67:0b:f3:46:31:39:0b:32:e0:03:
         b8:47:d3:e7:f8:bc:06:50:fc:4e:99:11:67:f8:a6:6d:ac:06:
         56:a7:1a:c8:05:fa:c8:0f:4c:56:2a:e1:37:d0:c4:91:a7:98:
         f5:a6:93:88:aa:00:08:b4:fc:da:e1:35:ef:19:ae:cb:6d:72:
         84:78:66:4a:5d:be:e3:5a:f2:1c:73:8a:8f:13:00:79:01:53:
         ef:29:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----