Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          j0IHSbYS45v++4Oxiq+nU4bKhCnFUKWSdgi6tDI7iac=
Subject key identifier:   8C:18:CF:FA:30:F8:93:99:17:D0:62:6F:14:96:0D:7A:42:FB:65:BF
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       01962F3DFAF752129B97714FB985EA36A5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          0FF2
Signing time:             Sun 13 Apr 2025 13:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:53 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: 9AYU14mDukLwXuVAbf/JeJEuF0pk7pq+i1IeQWrm5Ps=)
                          2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:fa:f7:52:12:9b:97:71:4f:b9:85:ea:36:a5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Apr 13 13:01:53 2025 GMT
            Not After : Apr 14 13:01:53 2025 GMT
        Subject: CN=8c18cffa30f8939917d0626f14960d7a42fb65bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:b0:5d:98:78:c3:5a:76:04:ae:b6:08:7a:
                    53:6d:f7:ff:c6:a6:7f:f3:25:e4:76:ea:8c:60:76:
                    70:a5:64:75:ba:c6:04:06:44:ee:5a:3d:fc:e9:68:
                    40:52:af:2c:95:b5:82:4c:97:9a:fe:19:4a:42:4a:
                    12:ed:41:5c:e3:3a:74:fc:92:ce:cc:6a:d3:83:cd:
                    12:d5:94:ff:53:14:b8:11:2f:42:a0:7c:64:7b:86:
                    aa:d2:16:6e:c0:53:e3:c6:e2:31:03:7c:10:56:b1:
                    10:f6:ec:f5:98:b6:37:ae:f6:b8:76:0b:87:8c:aa:
                    18:ed:87:ae:b8:a9:76:68:40:29:29:d8:6c:16:0b:
                    d5:6f:26:88:2f:7b:30:d4:89:7d:d5:c4:fc:cd:9c:
                    ac:44:a7:39:97:1e:d9:d5:c8:ac:ae:07:bd:f9:2a:
                    1a:bf:1c:b2:84:52:72:c6:ff:30:0c:46:90:ba:08:
                    a9:2e:1c:69:f4:19:5d:ac:93:24:e7:62:c8:77:02:
                    7b:ed:6d:27:0a:75:5f:58:63:74:d2:21:35:85:66:
                    84:4d:a5:11:67:4d:df:fa:7b:0a:3b:3b:69:d9:5b:
                    3e:0a:94:ad:33:a5:cb:5d:10:04:1d:87:0c:51:00:
                    66:98:18:1a:4e:44:2a:b9:55:3c:07:5b:86:1f:bb:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:18:CF:FA:30:F8:93:99:17:D0:62:6F:14:96:0D:7A:42:FB:65:BF
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d4:59:f7:1b:c0:17:29:ae:64:5a:c7:f1:56:a2:8a:05:25:
         7c:24:54:f2:c0:06:9d:3e:62:b4:49:f6:f9:f2:5c:3f:f3:6a:
         35:dc:2b:0d:29:21:dc:97:69:01:61:65:ec:e1:da:2f:1c:01:
         7a:6a:a2:75:a1:cc:8a:f7:a0:2f:66:a0:58:e9:6c:8e:47:5c:
         44:e4:b3:39:10:e6:1f:8d:5b:42:dd:14:88:a5:69:ee:b1:38:
         3a:e1:9b:26:ec:7f:02:21:cd:da:bb:05:92:6c:7e:e9:9b:a3:
         0c:2a:2c:5f:69:2e:d0:44:95:84:ef:37:bc:85:49:76:41:e6:
         98:3e:a8:d6:60:68:f9:e0:1b:84:5e:32:c0:f7:03:71:f5:a4:
         07:16:4f:3a:49:5a:de:05:26:43:0c:fa:f7:8c:27:d5:86:5d:
         b9:3e:bf:52:40:a7:70:a6:32:49:a4:63:e9:67:de:e9:d7:ee:
         04:14:ad:b1:25:01:e2:ff:fd:61:30:6c:52:9f:e2:b4:59:9d:
         8a:a3:1e:e9:f7:22:3e:17:93:42:1e:bd:a1:e9:fe:a2:4e:f6:
         8e:74:50:7d:d9:cf:b5:34:c8:7a:6d:be:57:34:01:df:03:af:
         01:d3:46:98:c1:ce:56:7d:f5:47:bc:27:2c:e8:8b:db:26:11:
         ad:e2:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----