Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File:                     7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier:          4dxPYEOiJb5KIULphJbevgr+SXl8h6CIpaJQGsyPDzo=
Subject key identifier:   80:1D:B6:52:50:64:34:FC:71:FD:84:00:D3:1F:92:8D:E6:79:4A:7A
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer:       /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial:       01962E618BC47C1838DE7085EEADA0A0A15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number:          03E0
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: Hn0tOEzOi6jiOBtzqySYJkHzQwyRhvMNBU7pd505WjY=)
                          2: JFdpz4qHx_4cniX3BWWOLLPVqtE.roa (hash: p/0kdoGRXrffXN49KkQkmbIDXM/4wVxkOOygBUu78vA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:c4:7c:18:38:de:70:85:ee:ad:a0:a0:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=801db652506434fc71fd8400d31f928de6794a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:1b:50:fc:e4:0f:b8:44:52:5a:e5:05:f8:
                    d7:8b:f6:85:da:96:0f:8d:da:68:c6:74:25:06:54:
                    a5:85:28:af:f5:f3:19:24:3e:39:10:c2:98:b8:ba:
                    f1:92:05:ec:9d:3f:6c:a3:22:0e:c7:4b:08:00:b6:
                    23:5b:f9:ab:62:72:d7:b3:d4:46:98:6f:e4:b3:2a:
                    3f:24:75:15:88:fb:62:34:a0:07:67:31:29:0d:e3:
                    e5:ec:3d:fa:ce:2a:f2:a8:36:38:c8:d3:42:42:44:
                    a2:a3:d1:69:ad:38:5e:9e:7e:5b:a6:d2:a4:27:e6:
                    0c:de:f0:1c:b2:7d:c4:73:25:68:25:9e:60:6e:83:
                    0b:82:ab:5c:15:d6:1f:d7:c9:6a:04:1a:2f:3c:4c:
                    04:fe:88:9d:88:90:ea:a4:a2:ac:f9:bc:89:c1:61:
                    02:05:aa:eb:4c:02:82:67:cd:34:35:88:f3:fb:1e:
                    fe:7a:f4:cf:c1:32:70:b6:bb:ea:1d:09:73:be:86:
                    a1:d4:16:17:c0:32:4c:a3:bf:ca:11:07:90:79:d3:
                    33:6d:ba:a2:e3:bb:9d:ec:41:97:4a:c6:4b:07:bc:
                    f6:a5:cd:79:8e:58:2c:a2:2a:8a:b0:ad:f0:58:ff:
                    b3:2f:52:4b:21:f4:26:b2:ca:14:db:f4:12:c8:2b:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1D:B6:52:50:64:34:FC:71:FD:84:00:D3:1F:92:8D:E6:79:4A:7A
            X509v3 Authority Key Identifier:
                keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:55:8a:17:df:f6:b1:4a:eb:b1:81:69:f2:27:7f:c5:e2:bd:
         9d:8f:48:26:dc:4f:71:d9:f8:e4:24:f8:9f:f7:c0:0b:fb:55:
         a1:c9:d5:81:7c:e7:47:c2:cb:7f:c2:ac:f7:52:71:f1:19:bf:
         d0:15:2a:6e:3a:66:f6:06:0d:5e:04:7b:63:bd:d3:be:4c:e0:
         16:f1:de:b6:6a:d8:56:60:38:80:15:dd:52:08:aa:28:a2:9c:
         0a:0e:f4:73:17:c9:3a:9e:ce:59:f0:93:b4:2f:d7:b0:b8:38:
         46:e1:41:d2:bf:13:9a:4b:a7:26:25:2a:f1:ad:49:70:e3:11:
         1e:3e:55:44:36:14:8d:6a:d7:fc:55:66:5c:7c:e7:e7:bc:6a:
         05:84:2d:ab:b7:ad:6a:59:d1:d8:90:4e:74:b6:29:8d:a7:fa:
         70:79:d8:3c:00:3a:df:d0:4d:d1:9f:2f:94:e9:d3:0b:44:07:
         53:c9:bc:93:60:90:1c:58:4b:42:98:35:39:f6:39:6f:ff:99:
         f0:ce:e8:17:dd:53:ea:02:4b:14:7c:ab:91:6e:df:eb:47:34:
         fb:fd:a3:b7:7e:c7:21:82:d4:97:9a:ee:12:5f:77:a5:04:ab:
         e8:49:99:d2:c2:f8:b6:2b:77:6d:52:dc:ea:ca:b7:10:88:d8:
         f0:dd:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----