Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          JF2w+G0HM4dIQ2YdCNdDZL2j22nKNCVPabiUiHXSYdc=
Subject key identifier:   2D:46:B6:1E:9D:22:A5:FA:05:4A:A9:CE:5F:FB:FE:C5:24:C2:5A:86
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       01962DF3F9D071476775E33BE78E366C63EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          0E81
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: yFr7s7R5Rwf8dDuvl6lowTtg+iNIiK0VzGZy+RIs4S4=)
                          2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:d0:71:47:67:75:e3:3b:e7:8e:36:6c:63:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=2d46b61e9d22a5fa054aa9ce5ffbfec524c25a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:fd:f7:6c:67:fa:1b:d8:03:32:98:f0:63:
                    d6:24:0e:29:61:df:b7:f7:b9:70:69:c5:6d:7a:d1:
                    47:f0:85:99:b6:ad:cd:c1:3a:3e:b8:df:72:ed:9a:
                    1e:14:95:be:f7:ae:06:48:39:0f:77:52:70:28:b3:
                    e4:50:b8:31:7b:82:d3:12:83:c1:6c:84:27:c3:e8:
                    1d:31:8f:0c:c3:03:8f:81:2c:4b:a3:78:ea:1c:61:
                    ca:bb:fd:22:9c:a0:d0:e4:d0:08:9d:76:ee:90:3b:
                    46:0f:05:b8:d1:b2:e3:25:d0:98:39:57:86:c7:f5:
                    16:ae:07:cc:13:97:ab:8f:0a:dc:bf:96:0d:b1:81:
                    dc:e7:d9:6c:11:51:7b:6a:81:1e:4e:70:63:42:a3:
                    06:65:8c:75:d2:cf:f9:7f:78:6d:b8:54:3e:ee:30:
                    bf:ed:60:3a:c7:9d:2a:75:d8:a8:59:b2:fd:6e:3b:
                    74:3b:77:31:50:81:c1:f6:9d:05:c6:56:55:60:24:
                    e6:f3:82:1b:16:7e:00:10:fd:0d:fe:1e:1e:a7:8e:
                    dd:b3:50:3a:b5:f4:01:51:1d:e9:39:44:b3:18:8a:
                    86:f3:0d:57:82:0b:c5:ec:48:c3:77:a2:2b:ef:eb:
                    11:16:36:30:8d:8b:54:9b:a1:75:ab:98:57:52:c3:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:B6:1E:9D:22:A5:FA:05:4A:A9:CE:5F:FB:FE:C5:24:C2:5A:86
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:4f:75:8c:66:51:1d:d3:08:4b:1d:ca:3c:d8:4f:d0:e8:
         f3:f4:b5:ea:28:dc:15:fa:46:9c:2d:94:f8:14:c4:78:47:2b:
         5c:3b:fc:e4:c1:66:db:07:79:0a:b9:11:46:c7:ea:72:47:88:
         af:58:2d:4a:c2:9b:bc:5b:c3:07:ba:99:cb:8e:a3:cc:82:55:
         65:5f:6c:b7:b8:0f:a9:a2:bf:7c:42:6c:7b:e3:15:25:f0:e4:
         75:cf:79:7b:c2:e5:65:4b:3d:cd:dd:9b:09:18:64:9b:ba:b7:
         13:d2:56:c3:88:4a:52:7d:e2:88:8a:fb:13:25:b5:2e:f7:48:
         77:08:6f:7f:2d:b3:bd:24:32:81:2a:0b:bc:1e:d9:50:09:d8:
         5e:c8:da:27:66:7f:24:3e:39:d5:3e:2f:6c:5f:24:cd:a9:80:
         4f:78:ca:f4:87:7a:25:b3:e9:40:6a:35:40:32:fb:bd:8b:6d:
         be:3e:b1:16:3e:18:1e:d1:6a:3a:fd:83:b6:28:22:5f:22:71:
         8f:ef:5d:92:86:fb:81:9a:03:16:a4:d1:c3:d5:3b:c2:33:09:
         29:b6:a3:51:27:8f:c1:27:76:86:17:bd:2b:ed:76:d3:9a:48:
         a7:d8:9e:c3:9e:20:be:5f:b2:b0:b0:ef:82:39:cb:81:73:ce:
         99:c5:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----