Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File:                     R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier:          6SEPwVjy3Li8uzVsSCIlcBOEcvI43IBHbf+L19d1vEM=
Subject key identifier:   7A:23:7D:46:51:EE:C6:39:6D:AF:13:19:BF:6E:C3:18:E3:9F:EC:92
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer:       /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial:       01962ECFAC73BF9FD6D88869D80D3979A777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: N1uQM4c2Jel6Xy3OzLjieHbxQrGcov1i/87yETjb/xw=)
                          2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ac:73:bf:9f:d6:d8:88:69:d8:0d:39:79:a7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=7a237d4651eec6396daf1319bf6ec318e39fec92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:97:02:5a:cb:9f:84:91:e1:69:25:2c:c7:
                    1a:79:52:34:a0:e5:0b:8c:33:c6:3c:59:32:48:81:
                    d6:c7:60:04:3c:cc:39:6f:78:88:a0:cd:66:c4:83:
                    7e:f0:92:91:f9:78:7f:08:88:71:35:3d:e0:95:34:
                    2c:60:57:48:48:43:ac:6c:d3:86:e7:a1:6a:62:90:
                    40:0d:0f:ee:98:6a:12:b6:42:e1:77:41:a2:71:5f:
                    00:c9:3d:00:a1:9e:22:57:aa:e4:f5:17:b1:8c:36:
                    a5:81:a1:7a:4a:25:14:e4:4f:df:7f:95:d5:c0:37:
                    4c:21:b9:3f:20:7f:be:8c:e3:5b:60:fc:d2:a5:d1:
                    36:a7:bc:46:5d:ce:0d:10:c1:9a:6f:65:02:8b:e4:
                    0c:b3:de:01:38:7b:e6:c6:c9:2a:b1:ac:81:b6:87:
                    f3:21:34:b9:2f:57:e8:bb:f0:9d:7a:ec:69:ea:48:
                    97:56:bc:25:1f:52:ee:94:92:ee:f8:7e:95:98:1a:
                    9f:eb:21:62:2c:e0:0b:88:0b:58:a1:e6:9d:dc:18:
                    0a:71:b1:7e:81:76:4f:83:36:71:dd:11:c2:ad:c2:
                    22:80:6d:bc:3d:16:73:04:a1:2a:98:cc:c3:cc:11:
                    a3:0b:82:cc:22:fb:b6:b5:54:af:c6:5d:f7:e9:8e:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:7D:46:51:EE:C6:39:6D:AF:13:19:BF:6E:C3:18:E3:9F:EC:92
            X509v3 Authority Key Identifier:
                keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:05:ec:e8:7f:8c:86:f2:a4:23:44:4e:5a:44:83:47:a1:a7:
         0a:63:f0:de:07:21:6a:35:4e:f4:70:2d:00:7e:33:99:4a:82:
         fc:7b:d7:ad:11:69:aa:ed:82:88:e9:5d:86:bc:7c:68:b1:f9:
         38:4a:07:e5:3a:e8:89:20:78:c9:3e:9b:7a:29:3b:82:2d:ad:
         23:34:07:67:01:c0:1b:9e:ee:ba:52:a5:4b:2e:42:1c:a4:86:
         35:14:94:9a:cb:69:7f:5d:fb:a2:b1:e3:73:3a:8b:2d:8e:70:
         92:e1:5a:55:9b:19:de:12:50:09:86:f2:54:65:ad:39:58:26:
         b9:b5:d5:58:64:94:29:b8:9f:67:6e:b2:53:2b:6b:67:40:04:
         42:e1:c5:32:e7:36:e8:fd:db:ef:c1:46:2d:08:03:97:af:e4:
         f9:9e:a3:68:f9:af:34:d1:79:c5:32:75:f1:33:38:23:3d:80:
         ff:47:1c:8c:a7:50:ba:ad:5f:42:89:e6:8f:15:9e:47:72:62:
         68:fb:4a:b3:8d:2c:75:59:63:ae:eb:c5:f9:5c:20:28:cd:a2:
         19:eb:15:9c:da:52:b1:05:eb:14:b6:67:cd:5a:84:75:5a:35:
         08:16:47:b8:d5:e3:19:e9:c3:7e:ad:67:b6:05:54:64:3b:1d:
         84:db:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----