Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File:                     7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier:          D5SSgECm88x59w24TldIiNJWg/GTXQsqAaFEVhY/Lps=
Subject key identifier:   7E:8B:17:D6:97:68:42:F8:7A:6D:76:F9:F7:2A:DD:37:6E:60:B8:92
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer:       /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial:       01962F06A1FE6AB29CEFC9FC979C7B86DBCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number:          0EE1
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: jecCuM91tfMOgx1nQioF5BEhB2xW11r+zjUQVkKs9yA=)
                          2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a1:fe:6a:b2:9c:ef:c9:fc:97:9c:7b:86:db:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=7e8b17d6976842f87a6d76f9f72add376e60b892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:9d:ee:c0:1a:34:7a:93:9a:ca:bc:03:6f:
                    50:76:49:a8:43:9a:0e:f7:4c:4e:a9:65:9f:8c:5f:
                    09:60:71:1d:8b:16:56:5c:cd:51:0d:79:da:fb:9a:
                    a1:5a:a5:e6:d6:38:4a:ce:eb:fe:4e:a5:5c:5d:7f:
                    c6:dd:99:34:93:60:69:01:38:6c:71:0c:be:06:bc:
                    94:1b:71:dd:58:c2:60:b0:ec:8d:64:25:88:fb:9b:
                    c3:7d:32:81:bd:33:5e:11:b7:3a:bf:cb:00:54:03:
                    fd:97:cd:3d:da:1a:d0:42:6f:27:0a:0f:9b:7d:69:
                    71:dc:2b:82:84:4c:07:70:9b:ad:b7:d7:1e:d4:13:
                    cb:16:cb:a2:b9:c2:5f:2f:c7:0c:8a:4b:9c:a6:d2:
                    ad:f9:54:c0:de:c0:31:7c:ea:88:32:5a:04:79:81:
                    5e:b2:ac:f1:61:76:66:28:1f:60:a0:19:a0:61:22:
                    36:ad:7e:38:de:a8:83:bd:28:71:58:f8:b6:4d:35:
                    57:09:00:11:f7:c9:a4:86:fa:cc:ad:42:cf:e5:37:
                    29:d8:8d:ff:37:f7:5d:c2:90:71:43:97:6c:19:d9:
                    b2:4e:0f:b6:fb:a4:ff:22:d9:0a:f6:40:f2:c7:f9:
                    62:5a:cb:bf:46:af:2b:44:9a:97:25:32:8d:79:61:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:17:D6:97:68:42:F8:7A:6D:76:F9:F7:2A:DD:37:6E:60:B8:92
            X509v3 Authority Key Identifier:
                keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:3f:3f:46:35:c3:94:e5:2c:0b:7c:f2:38:62:4e:e1:f1:
         55:cc:40:68:82:f9:05:3a:e1:0e:f3:0d:b7:bb:b7:f0:2a:65:
         3e:4c:c0:95:ef:3b:42:c8:92:60:80:6e:2a:39:ae:66:08:16:
         2a:bc:9e:87:65:89:38:5a:6b:eb:a2:b7:32:40:c8:ee:e3:ef:
         72:f6:c3:ae:aa:67:e7:13:94:53:14:15:71:79:18:cf:bb:72:
         b2:9c:9e:16:9e:c7:2d:e4:b4:74:75:da:36:35:15:0f:1c:1f:
         ef:73:04:2a:79:b4:be:ff:de:71:e0:97:0a:d6:9c:c9:4e:fd:
         f3:c2:85:c4:b6:28:50:1c:76:f7:35:9e:fe:99:00:57:b2:5e:
         86:2f:61:a9:71:ec:49:44:b9:47:17:25:1e:ea:cd:19:b9:89:
         8e:f3:41:ab:2d:30:4b:f8:5a:08:08:99:96:c3:3f:5e:48:b0:
         73:c7:f9:31:a0:f5:d2:b9:3a:24:03:98:f2:b7:08:b8:eb:aa:
         80:9f:c7:82:80:4b:98:b0:38:27:59:8d:d1:d5:17:7d:d1:05:
         7b:5c:f9:c1:e9:61:a2:92:34:d1:89:75:81:b7:13:5b:28:aa:
         89:24:0b:e4:da:da:5f:a0:a1:09:06:ba:15:33:78:5f:f7:85:
         08:f1:c5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqH+arKc78n8l5x7htvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYzMxMzE5NzZhZWEyN2QxNzFjNmMyNjdhOThkM2YzODJh
NjFhMmEwHhcNMjUwNDEzMTIwMTI1WhcNMjUwNDE0MTIwMTI1WjAzMTEwLwYDVQQD
Eyg3ZThiMTdkNjk3Njg0MmY4N2E2ZDc2ZjlmNzJhZGQzNzZlNjBiODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob+d7sAaNHqTmsq8A29QdkmoQ5oO
90xOqWWfjF8JYHEdixZWXM1RDXna+5qhWqXm1jhKzuv+TqVcXX/G3Zk0k2BpAThs
cQy+BryUG3HdWMJgsOyNZCWI+5vDfTKBvTNeEbc6v8sAVAP9l8092hrQQm8nCg+b
fWlx3CuChEwHcJutt9ce1BPLFsuiucJfL8cMikucptKt+VTA3sAxfOqIMloEeYFe
sqzxYXZmKB9goBmgYSI2rX443qiDvShxWPi2TTVXCQAR98mkhvrMrULP5Tcp2I3/
N/ddwpBxQ5dsGdmyTg+2+6T/ItkK9kDyx/liWsu/Rq8rRJqXJTKNeWGO+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6LF9aXaEL4em12+fcq3TduYLiSMB8GA1UdIwQY
MBaAFO7DExl2rqJ9FxxsJnqY0/OCphoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEt
NGNkM2U3MzIxNmYxLzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEtNGNkM2U3MzIxNmYx
LzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9Q/P0Y1
w5TlLAt88jhiTuHxVcxAaIL5BTrhDvMNt7u38CplPkzAle87QsiSYIBuKjmuZggW
Kryeh2WJOFpr66K3MkDI7uPvcvbDrqpn5xOUUxQVcXkYz7tyspyeFp7HLeS0dHXa
NjUVDxwf73MEKnm0vv/eceCXCtacyU7988KFxLYoUBx29zWe/pkAV7Jehi9hqXHs
SUS5RxclHurNGbmJjvNBqy0wS/haCAiZlsM/Xkiwc8f5MaD10rk6JAOY8rcIuOuq
gJ/HgoBLmLA4J1mN0dUXfdEFe1z5welhopI00Yl1gbcTWyiqiSQL5NraX6ChCQa6
FTN4X/eFCPHFwQ==
-----END CERTIFICATE-----