Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File:                     8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier:          4X/bHRrUnZFdJv2nnCkP2yaG5NxGl+TcI8g+CY3Gfqw=
Subject key identifier:   34:6A:E2:E8:B7:3A:40:82:59:89:3C:79:77:AF:E1:38:48:63:4A:B0
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer:       /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial:       01962FAB07C138346C3BA700A676CB550FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number:          7F
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: zh/huIIeb7Y7m6qhzmPZTWwa0qEG7egWU+tnvMwmN98=)
                          2: PvgwRlUqx5l8W4N83zrKdHTwTaY.roa (hash: HJmAy6plt7EaRjG3H9OUj++QzEsZOYTODS8MTJferfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:07:c1:38:34:6c:3b:a7:00:a6:76:cb:55:0f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=346ae2e8b73a408259893c7977afe13848634ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:b1:30:9a:f7:a6:f9:a9:51:76:02:74:8f:
                    25:93:cf:a0:cd:eb:92:ee:b1:bb:31:01:1c:da:33:
                    1a:fb:e9:6f:76:7a:b8:de:e8:79:37:f1:cd:20:df:
                    1d:15:94:1c:54:40:68:0c:12:ef:a4:33:db:95:b6:
                    24:c2:3f:8f:aa:86:e6:0f:4c:9a:40:44:20:82:c5:
                    97:7f:a4:ff:16:60:cf:57:bd:c2:b7:43:3f:f2:f1:
                    2b:e2:db:54:ad:0a:50:49:9a:ff:2e:fc:6c:73:8b:
                    31:ff:73:5e:7f:8d:57:3f:bc:bd:6b:12:22:76:74:
                    aa:d1:f8:3e:35:31:1f:73:89:e9:fc:ff:f6:e2:57:
                    80:4d:26:e9:08:3b:ef:da:16:db:d7:8a:a5:a3:b5:
                    9d:60:1a:62:da:6e:22:12:0c:d5:71:bc:44:ba:d9:
                    48:25:00:c4:75:c6:e2:39:e5:c8:82:f7:72:01:6c:
                    f0:7e:7e:dc:80:da:4b:5a:a4:1a:38:84:53:1d:a5:
                    48:32:3d:52:b8:be:3c:ca:9a:3c:9f:6b:49:13:97:
                    4d:68:1d:3c:a3:8a:75:0c:48:39:f0:c9:00:bc:88:
                    24:57:61:76:fe:22:78:6d:c1:d0:6c:da:00:4f:cc:
                    fa:cd:c0:df:1f:da:c8:8e:48:ff:0e:f7:05:ff:13:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:E2:E8:B7:3A:40:82:59:89:3C:79:77:AF:E1:38:48:63:4A:B0
            X509v3 Authority Key Identifier:
                keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:59:b7:8b:6d:2b:4a:54:a6:0e:54:58:a5:f7:57:22:07:
         da:df:0e:91:34:24:db:ce:f1:0f:12:fb:8d:ec:dd:75:b8:98:
         d1:39:2c:81:66:d5:d1:fc:da:8e:4a:3f:fc:01:1b:10:48:08:
         54:cd:fa:8a:1c:9b:dd:fe:18:55:cd:36:f6:aa:86:c7:89:b5:
         03:8f:f8:b8:a5:18:bc:6e:a7:d6:74:15:cc:5e:bc:b4:fd:be:
         5f:54:96:86:ce:43:c5:0e:1d:a6:19:81:3d:30:a7:4b:dc:49:
         93:63:64:de:3c:4a:29:21:0c:14:4a:9c:7d:1e:09:07:5b:21:
         02:4f:7b:04:ab:71:31:06:39:35:c0:52:17:62:f5:b9:ed:5f:
         c3:38:75:a1:68:e4:a3:31:90:5d:7d:12:f7:59:d4:35:e1:46:
         3a:66:4f:f5:f6:7c:ed:c3:ce:06:b4:43:c7:5e:79:20:66:b5:
         da:63:74:e2:a2:fe:08:1f:82:ed:32:83:09:53:e7:ea:35:67:
         2d:e0:1c:d3:dd:8f:85:5b:a2:02:99:e0:17:71:af:da:0f:e6:
         96:ff:f6:4a:66:c1:07:ea:2c:c1:67:8f:80:c8:b1:f8:66:9c:
         73:e5:b3:66:71:c8:88:63:ed:93:cf:67:b7:59:7c:cb:c4:95:
         29:f8:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----